Buy Slowly App has an arbitrary user registration vulnerability

Buy Slowly APP is a client application that provides users with a shopping guide and price comparison website that brings together information on offers, event promotions, historical price trends, etc. from all major online shopping malls. There is an arbitrary user registration vulnerability in...

buy-painting.com XSS vulnerability

Open Bug Bounty ID: OBB-235606 Description| Value ---|--- Affected Website:| buy-painting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Joomla JooDatabase 3.1.0 SQL Injection

Exploit Title: Joomla! Component JooDatabase v3.1.0 - SQL Injection Google Dork: inurl:index.php?option=comjoodb Date: 24.02.2017 Vendor Homepage: https://feenders.de/ Software Buy: https://extensions.joomla.org/extensions/extension/core-enhancements/coding-a-scripts-integration/joodatabase/ Demo...

Joomla! Component GPS Tools 4.0.1 - SQL Injection

Joomla! Component GPS Tools 4.0.1 - SQL Injection Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla EShop 2.5.1 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comeshop Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla! Component EShop 2.5.1 - 'id' SQL Injection

Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comeshop Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/eshop-joomla-shopping-cart.html Demo:...

Joomla Spider FAQ Lite 1.3.1 SQL Injection

Exploit Title: Joomla! Component Spider FAQ Lite v1.3.1 - SQL Injection Google Dork: inurl:index.php?option=comspiderfaq Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/spider-faq-lite/ Demo:...

Itech B2B Script SQL Injection Vulnerability (CNVD-2017-01854)

B2B Script v4.29 is a versatile WEB solution for those who want to quickly publish their B2B portals in minutes. A SQL injection vulnerability exists in the 'id' field in the buyleads-details.php page in B2B Script v4.29, which can be exploited by an attacker to obtain sensitive information from...

Joomla JE Tour 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Tour 2.0 - SQL Injection Google Dork: inurl:index.php?option=comjetour Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla JE Auction 1.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Auto 1.5 - d_itemid SQL Injection

Joomla! Component JE Auto 1.5 - ditemid SQL Injection Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE auction 1.6 - 'eid' SQL Injection

Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/auction/je-auction/ Demo:...

Joomla! Component JE Auto 1.5 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/je-auto/ Demo:...

Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

Joomla! Component JE Property Finder 1.6.3 - SQL Injection

Joomla! Component JE Property Finder 1.6.3 - SQL Injection Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Classify Ads 1.2 - pro_id SQL Injection

Joomla! Component JE Classify Ads 1.2 - proid SQL Injection Exploit Title: Joomla! Component JE Classify Ads 1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeclassifyads Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Viavi Movie Review SQL Injection

Exploit Title: Viavi Movie Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/movie-review/12729570 Demo: http://viavilab.com/codecanyon/moviereviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit...

Viavi Real Estate - SQL Injection

Exploit Title: Viavi Real Estate - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/viavi-real-estate/11217313 Demo: http://viavilab.com/codecanyon/realestatedemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Explo...

Viavi Product Review SQL Injection

Exploit Title: Viavi Product Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/product-review/12406163 Demo: http://viavilab.com/codecanyon/productreviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

Domains Hostings Manager PRO 3.0 - entries SQL Injection

Domains Hostings Manager PRO 3.0 - entries SQL Injection Exploit Title: Domains & Hostings Manager PRO v 3.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://endavi.com/ Software Buy: https://codecanyon.net/item/advanced-domains-and-hostings-pro-v3-multiuser/10368735 Demo...