Joomla Component com_zelig SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== Joomla Component comzelig SQL Injection Vulnerability ====================================================== x Joomla Component Zelig x Author: s4r4d0 x Contact: email protected x Team:...

Joomla Bookmarks Cross Site Scripting

x Joomla Component Bookmarks x Date: 16/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team: Fatal Error x Bug: XSS on Component Bookmarks x Example: http://www.site.com/index.php?option=combookmarks=XSS x Demo:http://www.movinganthropology.de/index.php?option=combookmarks="XSS By Fatal...

Joomla Component com_hotproperty XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comhotproperty XSS Vulnerability ================================================== x Joomla Component Hotproperty x Author: s4r4d0 x Contact: email protected x Team: Fatal...

Joomla Component com_extcalendar XSS Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comextcalendar XSS Vulnerability ================================================== x Joomla Component Extcalendar x Author: s4r4d0 x Contact: email protected x Team; Fatal...

Joomla Hotproperty Cross Site Scripting

x Joomla Component Hotproperty x Date: 16/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team: Fatal Error x Bug: XSS on Component Hotproperty x Example: http://www.site.com/index.php?option=comhotproperty=XSS x Demo:http://www.montblanc-retreats.com/index.php?option=comhotproperty="XSS B...

Joomla Imoti Cross Site Scripting

x Joomla Component Imoti x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Imoti x Example: http://www.site.com/index.php?option=comimoti=XSS x Demo: http://www.bulgarian1stlineproperties.com/index.php?option=comimoti="XSS By Fatal Error x...

Joomla Extcalendar Cross Site Scripting

x Joomla Component Extcalendar x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Extcalendar x Example: http://www.site.com/index.php?option=comextcalendar=XSS x Demo:http://www.ctsalsa.com/cms/index.php?option=comextcalendar="XSS By Fatal...

Joomla Mosforms Cross Site Scripting

x Joomla Component Mosforms x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Mosforms x Example: http://www.site.com/index.php?option=commosforms=XSS x Demo: http://www.euskaletxeak.net/index.php?option=commosforms="XSS By Fatal Error x...

Joomla Comprofiler Cross Site Scripting

x Joomla Component Comprofiler x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Comprofiler x Example: http://www.site.com/index.php?option=comcomprofiler=XSS x Demo: http://www.euskaletxeak.net/index.php?option=comcomprofiler="XSS By Fat...

Joomla Product Cross Site Scripting

x Joomla Component Product x Date: 15/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component Product x Example: http://www.site.com/index.php?option=comproduct=XSS x Demo: http://www.breastcancercampaign.org/index.php?option=comproduct="XSS By Fatal Error...

Joomla Component com_news com_article com_content com_event XSS

Exploit for php platform in category web applications ==================================================================== Joomla Component comnews comarticle comcontent comevent XSS Vuln ==================================================================== x Joomla Component News x Author: s4r4d0...

Joomla News / Article / Content / Event Cross Site Scripting

x Joomla Component News x Date: 14/05/2010 x Author: s4r4d0 x Contact: [email protected] x Team; Fatal Error x Bug: XSS on Component News x Example: http://www.site.com/index.php?option=comnews=XSS x Demo: http://www.bgci.org/index.php?option=comnews="XSS By Fatal Error x Made in Brazil x Joomla...

Inside a Banker Trojan

The attackers behind the raft of banker Trojans emanating from Brazil these days are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade...

PHPCOIN 1.2.1 - mod.php Local File Inclusion

PHPCOIN 1.2.1 - mod.php Local File Inclusion Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams :...

PHPCOIN 1.2.1 - 'mod.php' Local File Inclusion

Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams : c00kies , BugSec , BotecoUnix & c0d3rs + Sites :...

UltraBB version 1.17 suffers from a cross site scripting vulnerability

No description provided by source. B UltraBB 1.17 B Download of trial version: http://ultratrial.com/trial.php B Vendor: ultrabb.net BPrice: $99,00 B Author: s4r4d0 B mail: [email protected] B Bug: Cross Site Scripting has benn found on viewpost.php file . B Exploit:...

HAWHAW SQL Injection

o-o HAWHAW C o-o Download: http://www.hawhaw.de/download o-o Vendor: www.hawhaw.de o-o Author: s4r4d0 o-o mail: [email protected] o-o Bug: Sql Injection has benn found on newsread.php file. o-o Exploit: http://host/wap/newsread.php?storyid=-1+UNION+SELECT+1,@@version,3,4 o-o Demo:...

phpBB 2.0.1 Cross Site Scripting

phpBB 2.0.1 Download: http://www.phpbb.com/downloads Vendor: www.phpbb.com Author: s4r4d0 mail: [email protected] Bug: Cross site scripting has benn found on viewtopic.zsp file. Exploit: http://host/bb/viewtopic.zsp?t=Xss Demo: http://www.recipezaar.com/bb/viewtopic.zsp?t="XSS By Fatal Error Made ...

Publique! CMS SQL Injection Vulnerabilities

===== Tempest Security Intelligence - Advisory 01 / 2010 ============= SQL injection vulnerability in Publique! Framework -------------------------------------------------- Authors: Christophe de la Fuente christophe SPAM tempest.com.br Gustavo Pimentel Bittencourt...

Publique! Framework 2.3 SQL Injection

===== Tempest Security Intelligence - Advisory 01 / 2010 ============= SQL injection vulnerability in Publique! Framework -------------------------------------------------- Authors: Christophe de la Fuente Gustavo Pimentel Bittencourt ===== Table of Contents ================================= 1...