EasyWebTime – SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : EasyWebTime – SQL Injection Vulnerability Author : IrIsT.Ir Discovered By : BestC0d3r Email : BestC0d3ratYahoodotcom Home : http://IrIsT.Ir Software Link : http://www.easywebtime.com Security Risk : High Version : All Version...

Avcmedia CMS SQL Injection

Exploit Title : avcmedia Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.avcmedia.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:" Developed and hosted...

WIS Coldfusion Exploit

Exploit for windows platform in category dos / poc Exploit Title: WIS Coldfusion Exploit Date: 9-9-2012 Author: Noxxie Vendor or Software Link: http://www.wis.nl/Onzeklanten link that also shows customers , gives an idea of inpact Version: All versions with search form are affected Category::...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

Design/Logic Flaw

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

CVE-2010-5260

CVE-2010-5260 describes an untrusted search path (DLL hijacking) vulnerability in Agrin All DVD Ripper 4.0. A local attacker can gain privileges by placing a malicious wnaspi32.dll in the current working directory, demonstrated using a directory containing an .ifo file. Affected component/file: w...

CVE-2010-5260

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

PT-2012-1470

Name of the Vulnerable Software and Affected Versions Agrin All DVD Ripper version 4.0 Description The issue allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory. This can be demonstrated by a directory that contains a .ifo file...

CVE-2010-5260: Undefined Security Weakness

Untrusted search path vulnerability in Agrin All DVD Ripper 4.0 allows local users to gain privileges via a Trojan horse wnaspi32.dll file in the current working directory, as demonstrated by a directory that contains a .ifo file. NOTE: some of these details are obtained from third party...

Web@All CMS 2.0 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities

web@all - Local File Inclusion Multiple Arbitrary File Upload Vulnerabilities source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary...

Fire Belly Design CMS SQL Injection

Exploit Title : firebellydesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://firebellydesign.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Design &...

web@all - Local File Inclusion / Multiple Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/55426/info web@all is prone to a local file-include vulnerability and multiple arbitrary file-upload vulnerabilities. An attacker can exploit these issues to upload arbitrary files onto the web server, execute arbitrary local files within the context of t...

WEBSKINZ CMS SQL Injection

Exploit Title : WEBSKINZ Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.www.webskinz.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"DESIGNED &...

Thoughtmedia CMS SQL Injection

Exploit Title : thoughtmedia Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.thoughtmedia.us/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Developed by...

Symbion Productions CMS SQL Injection

Exploit Title : Symbion Productions Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.symbionproductions.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

FreeBSD : moinmoin -- wrong processing of group membership (4f99e2ef-f725-11e1-8bd8-0022156e8794)

MoinMoin developers report : If you have group NAMES containing 'All' or 'Known' or 'Trusted', they behaved wrong until now they erroneously included All/Known/Trusted users even if you did not list them as members, but will start working correctly with this changeset. E.g. AllFriendsGroup : -...

Drop CMS SQL Injection

Exploit Title : drop Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.drop.it/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Webdev: www.drop.it" Expl0iTs...

EasyWeb SQL Injection

Exploit Title: easyweb SQLi Vulnerability Date: 09/03/2012 Author: Persia Security Group - Prince & mafia1990 Vendor Homepage: http://www.easy-web.it/ Version: All Version Google Dork: intext:"powered by easyweb" site:it Tested on: win 2003 & 2008 server , Vista , 7 & IIS 6.0, 7.0, 7.5...

moinmoin -- wrong processing of group membership

MoinMoin developers report: If you have group NAMES containing "All" or "Known" or "Trusted", they behaved wrong until now they erroneously included All/Known/Trusted users even if you did not list them as members, but will start working correctly with this changeset. E.g. AllFriendsGroup: JoeDoe...