Display event CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Display event CMS SQL Injection Vulnerability ============================================= + Auth0r : Game Over + E-m41L : gameover20atlivedotcom + D0rk : inurl:index.php?action=cms.display + S-Si...

phpBazar Administrative Disclosure

===================================== phpBazar admin path discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Publised :: 22 june 2010 vender :: n/a...

ClipBucket AdminPanel edit site Vulnerability

============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' ...

ClipBucket AdminPanel edit site Vulnerability

Exploit for php platform in category web applications ============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world !...

CVE-2009-4793

The CVE-2009-4793 issue affects BandSite CMS 1.1.4, specifically the adminpanel/scripts/addphotos.php functionality. Unrestricted file upload in the addphotos action of adminpanel/index.php allows remote authenticated administrators to upload a file with an executable extension and then access it...

EmiratesHost Insecure Cookie Handling

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : EmiratesHost Insecure Cookie Handling Vulnerability Author: jago-dz == TEam: MEhabEL-Dz From: ALGERia EmaiL: [email protected] Software Link: http://www.dz-goal.com/up/view.php?file=a88342493d...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in BandSite CMS 1.1.4 allows remote attackers to hijack the authentication of administrators and force a logout via adminpanel/logout.php...

CVE-2008-7056

BandSite CMS 1.1.4 does not perform access control for adminpanel/phpmydump.php, which allows remote attackers to obtain copies of the database via a direct request...

Php AdminPanel Free version 1.0.5 Remote File Disclosure Vuln

No description provided by source. Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

PHP AdminPanel Free 1.0.5 - Remote File Disclosure

PHP AdminPanel Free 1.0.5 - Remote File Disclosure Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani -...

Php AdminPanel Free version 1.0.5 Remote File Disclosure Vuln

Exploit for unknown platform in category web applications ============================================================= Php AdminPanel Free version 1.0.5 Remote File Disclosure Vuln ============================================================= Php AdminPanel Free version 1.0.5 Remote File...

PHP AdminPanel Free 1.0.5 - Remote File Disclosure

Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

BandSite CMS 1.1.4 (members.php memid) SQL Injection Vulnerability

No description provided by source. + BandSite CMS 1.1.4 SQL/Upload Shell Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote SQL Injection - The script is full of SQLI bugs.This is one of them. - Vulnerable code in...

BandSite CMS 1.1.4 - members.php SQL Injection

BandSite CMS 1.1.4 - members.php SQL Injection + BandSite CMS 1.1.4 SQL/Upload Shell Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote SQL Injection - The script is full of SQLI bugs.This is one of them. - Vulnerable code in...

Collabtive 0.4.8 (XSS/Auth Bypass/Upload) Multiple Vulnerabilities

No description provided by source. Collabtive 0.4.8 Multiple Vulnerabilities Name Multiple Vulnerabilities in Collabtive Systems Affected Collabtive 0.4.8 and possibly earlier versions Severity High Impact CVSSv2 High 8/10, vector: AV:N/AC:L/Au:S/C:P/I:C/A:P Vendor http://collabtive.o-dyn.de/...

bandsitecms-xss.txt

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

BandSite CMS 1.1.4 - Download Backup Cross-Site Scripting Cross-Site Request Forgery

BandSite CMS 1.1.4 - Download Backup Cross-Site Scripting Cross-Site Request Forgery + BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to...

leventveysi-sql.txt

Levent Veysi Portal v1.0 tr SQL Injection Vuln Software: Levent Veysi Portal v1.0 tr download: http://www.aspindir.com/goster/5001 demo: http://levent.fullmakale.com/blogum/ Found By: GeFORC3 | G3 Exploit: http://site.com/scriptpath/oku.asp?id=-1+union+select+0,1,kullaniciadi,sifre+from+admin...

WordPress AdminPanel CSRF/XSS - 0day

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +---------------------------------------------------------------------------+ SaMuschie Research Labs proudly presents . . . | +---------------------------------------------------------------------------+ Application...