Fluger Edit 2 Blind SQL Injection / Cross Site Scripting

===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild ===================================================== Dork...

RCart Cross Site Scripting / Admin Panel

Exploit for php platform in category web applications Type: Xss & default admin panel Google Dork: "powered by rcart" Date: 1/9/12 Author: rubenlinux Site : http://arealinuxdotblogspotdotcomdotes http://wwwdotyoutubedotcom/user/rubenlinux ================================== +...

RCart Cross Site Scripting / Admin Panel

| | | | '| | | | ' \ / \ ' \ | | | ' | | | \ / / | | | || | | | / | | | | | | | | | || | alert132; http://www.jaya4tech.com/admin| |----admin:admin http://www.emallhub.com/admin| Also: http://packetstormsecurity.org/files/115906/Zend-Framework-Information-Disclosure.html +...

Joomla ICAgenda SQL Injection / Path Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Joomla Component com_icagenda Blind SQLi/Path Disclosure

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Prestashop < v1.4.9.0 - Blockstore module : Arbitrary file upload

Exploit for php platform in category web applications Exploit Title: Prestashop v1.4.9.0 - Blockstore module : Arbitrary file upload Date: 2012-08-29 Author: leviathan Vendor or Software Link: http://www.prestashop.com Version: 1.4.9.0 Category:: webapps Google dork: Tested on: Prestashop 1.4.8.2...

VLinks 2.0.3 SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Bugged file is...

Vlinks 2.0.3 - id SQL Injection

Vlinks 2.0.3 - id SQL Injection !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes :...

Byte.am / E-Works.am CMS SQL Injection / LFI / Shell Upload

+-------------------------------------------------------------+ Azerbaijan Black Hatz Presentzz 0day for bitch Armenia --------------------------------------------------------------- Exploit title:Byte.am and e-works.am CMS MULTIPLE VULNERABLITIES Date:18 August 2012 Author: Worm Man Software...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

Nwahy Articles v2.2 CSRF Add Admin

Exploit for php platform in category web applications Exploit Title: Nwahy Articles V2.2 CSRF Add Admin Author: DaOne Category: webapps Software Link: http://www.nwahy.com/upload/article-v2.2.rar Google dork: intext:"Powered by Nwahy Articles V2.2" Exploit 0day.today 2018-03-19...

Elite Bulletin Board SQL Injection Vulnerability

Elite Bulletin Board is an advanced Bulletin Board program that provides advanced features such as CAPTCHA, sub-board, skinning ability, multilingual, commercial password encryption, and much more. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Sql injection

Multiple SQL injection vulnerabilities in Simple Web Content Management System 1.1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 itemdelete.php, 2 itemstatus.php, 3 itemdetail.php, 4 itemmodify.php, or 5 itemposition.php in admin/; or 6 status parameter to...

proservice cms Sql Injection Vulnerablity

Exploit for php platform in category web applications Exploit Title: proservice cms Sql Injection Vulnerablity Date: 18-06-2012 Author: cheki Vendor Link: http://proservice.ge/ Category:WebApp Price: NULL Contact: email protected Website: www.1337day.com && hacking.ge Greetings to: Anuka Bolqvadz...

Bricolage 1.x SQL Injection / Cross Site Scripting

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| alert0 2. http://localhost/admin/profile/source/ DEMO: http://demo.bricolagecms.org/admin/profile/source/ In 'Source Name' and 'description' field, POST DATA= "'--alert0 BSQL error pages on reflected XSS/malicious...

Swoopo Gold Shop CMS 8.4.56 Cross Site Scripting / SQL Injection

Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: ============...

SPIP Core 3.0.1 / 2.1.14 / 2.0.19 Cross Site Scripting

Exploit Title: SPIP Core $c if !inarray$n,array'fichier','exec','validationadmin' AND !isarray$c $suite .= "\n"; return genererformecrire$script, $suite, '', $submit; Details: -------- The variable $n isn't sanitized before being reinjected into the form generated. Needs: ------ Magicquotegcp...

Advanced Poll v2.03 SQL / XSS Vulnerabilties

Exploit for php platform in category web applications Advanced Poll v2.03 Multiple Vulnerabilties ======================================================================= .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.proxy2.de/ .:. Dork : "Powered by Advanced Poll Version...

Dblog 1.4.1 Insecure Session / Access Bypass

-------------------------------- Author : L3b-r1'z Date : 3/6/2012 Title : dblog Insecure Session \ Bypass Admin Vulnerability Version : 1.4.1 Download : http://www.dblog.it/sito/download.asp Dork : N\A -------------------------------- This proof of concept code was written for educational purpos...

Sql injection

Multiple SQL injection vulnerabilities in Pligg CMS before 1.2.2 allow remote attackers to execute arbitrary SQL commands via the 1 list parameter in a move action to admin/adminindex.php, 2 display parameter in a minimize action to admin/adminindex.php, 3 enabled parameter to admin/adminusers.ph...