Detna CMS SQL Injection

Exploit Title: Detna CMS sql injection Google Dork: "Powerd by Detna" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.detna.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - win7...

Keralainfotech CMS SQL Injection

Exploit Title: Keralainfotech CMS sql injection Google Dork: "Powered by Keralainfotech.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://keralainfotech.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windo...

Globi CMS SQL Injection

Exploit Title: globi CMS SQL Injection Vulnerability Google Dork: "Powered by globi" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.globi.ca/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - wi...

Jajitech IT Solutions CMS SQL Injection

Exploit Title: Jajitech IT Solutions CMS sql injection Google Dork: "Powered by Jajitech IT Solutions" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu...

Mediachurch CMS SQL Injection

Exploit Title: mediachurch CMS sql injection Google Dork: " Powered by MediaChurch & Calvary Episcopal Church" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://mediachurch.com/ Version: All Version Category:: webapps Tested on: GNU/Linux...

TAGWORX.CMS SQL Injection

Exploit Title: TAGWORX.CMS CMS gallery.php sql injection Google Dork: "Powered by " Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server -...

WebActive CMS Cross Site Scripting

Exploit Title: WebActive CMS Cross site Scripting Vulnerability Google Dork: Intext:"powered by: WebActive" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.webactive.nl/ Tested on: all ================================== + zoeken parametr...

Cutenews 1.5 Cross Site Scripting

Exploit Title: Cutenews 1.5 Cross site Scripting Vulnerability Google Dork: Intext:"Content Management Powered by CuteNews" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Site : Http://AjaxTm.com/ Vendor Home OR download link: http://cutephp.com/click.php?cutenewslatest Tested on: all...

Cm3 CMS Cross Site Scripting

Exploit Title: cm3 cms Cross site Scripting Vulnerability Google Dork: Intext:"Powered by cm3" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.cm3cms.com Tested on: all ================================== + keywords $ strSearchPhrase...

PhpFox 3.0.1 Cross Site Scripting

Exploit Title: phpFox Version 3.0.1 Cross site Scripting Vulnerability Google Dork: Intext:"Powered By phpFox Version 3.0.1" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.phpfox.com/ Tested on: all ================================== +...

Kingcow CMS Cross Site Scripting

Exploit Title: kingcow CMS Cross site Scripting Vulnerability Google Dork: Intext:"Powered by Central" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://kingcow.com/ Tested on: all ================================== + for parametr in search.ph...

Joomla Hello component suffers from a local file inclusion vulnerability.

No description provided by source. Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c :...

Joomla Hello Local File Inclusion

Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c : comhello&controller=../../../../../../../../etc/passwd%00 Please Use Null Byte %...

Joomla Component com_hello Local File Include

Exploit for php platform in category web applications Title : Joomla Component comhello Local File Include Author : Ajax Security Team Discovered By : devilzc0der & Dominator Dork : inurl:"comhello" h0m3 : www.ajaxtm.com Software Link : www.joomla.com Level : High p0c :...

Winds Online SQL Injection

Exploit Title: Winds online test.asp SQL Injection Vulnerability + Author: Cair3x + Team : Ajax Security Team + D0rk : Powered by FLEX360 Exploit Vulnerability Page : test.asp http://target.com/patch/test.asp?Cid=SQL Demo : http://www.netech.org/test.asp?cid=9' Exploit BY : Cair3x...

DEBIAN-CVE-2011-4361

MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sensitive information by 1 leveraging the SpecialUpload::ajaxGetExistsWarning function, or by 2 leveraging an extension, as demonstrated by the CategoryTree,...

inCommand Technologies Cross Site Scripting

------------In The Name Of God------------ inCommand Technologies, Inc. Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Website Design by inCommand Technologies, Inc." xss EXPLOIT: alert/0/...

StartSite.ir Cross Site Scripting

------------In The Name Of God------------ StartSite.ir Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Powered by StartSite.ir" xss EXPLOIT: alert/0/ VULN IN HERE...

Douran Portal File Download/Source Code Disclosure Vulnerability

Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: They didn't respond to the emails...

Douran Portal 3.9.7.8 File Disclosure

Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: They didn't respond to the emails...