1504 matches found
Auto Classifieds Script 2.0 - Add Admin CSRF Vulnerability
Auto Classifieds Script version 2.0 suffers from a cross site request forgery vulnerability. Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home :...
Auto Classifieds Script 2.0 Cross Site Request Forgery
Auto Classifieds Script v2.0 - CSRF Vulnerabilty Add Admin ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/preview/auto-classifieds-script/ .:. Test...
Joomla! Component Almond Classifieds - Arbitrary File Upload
Joomla! Component Almond Classifieds - Arbitrary File Upload source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately saniti...
Joomla! Component Almond Classifieds - Arbitrary File Upload
source: https://www.securityfocus.com/bid/64788/info The Almond Classifieds Component for Joomla is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue t...
CVE-2013-7216
Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...
Sql injection
Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...
CVE-2013-7216
Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...
CVE-2013-7216
CVE-2013-7216 : Classifieds Creator 2.0 contains multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL commands via (1) ID in demo/classifieds/product.asp or (2) UserID or (3) Password in demo/classifieds/admin.asp. Impact is described as remote command executi...
Classifieds Creator 2.0 SQL Injection
=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: Multiple Vulnerabilities Vendor: http://www.etoshop.com/ + Software: Classifieds Creator + infection: Multiple Vulnerabilities Version :2.0 author: R3d-D3v!L + TEAM: ABH ? contact:...
Joomla DJ Classifieds Extension 2.0 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications $$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds...
Joomla DJ Classifieds Extension 2.0 SQL Injection
$$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds - Time-Based Blind SQL Injection Google Dork:...
Joomla! Component dj-classifieds 2.0 - Blind SQL Injection
$$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ Classifieds - Time-Based Blind SQL Injection Google Dork:...
Joomla! Component dj-classifieds 2.0 - Blind SQL Injection
Joomla! Component dj-classifieds 2.0 - Blind SQL Injection $$$$$$\ $$\ $$\ $$$$$$\ $$ $$\ $$ | $$ | $$ $$\ $$ / | $$ | $$ | $$ / | $$ |$$$$\ $$$$$$$$ | $$$$$$\ $$ |$$ | $$ $$ | $$\ $$ | $$ | $$ | $$ | $$\ $$ | $$$$$$ |$$\ $$ | $$ |$$\$$$$$$ | / || ||/ Exploit Title: Joomla - DJ...
Craigslist Gold - SQL Injection
Exploit Title: Craigslist Clone Gold SQL injection Vulnerability Date: 04/05/2013 Author: Fallaga Team: FaLLaGa Tunisian Hackers Script url: http://www.scriptcopy.com/craigslist-clone-script/Craiglist-Gold-4444.html Version: N/A Tested on: Demo CVE : EXPL0!T...
Your Own Classifieds Cross Site Scripting
Vendor: http://www.yourownclassifieds.com Description: Your own classified software is a script that helps you creates your own store. Discovered by: Rafay Baloch Vulnerability: Non persistent XSS The script fails to sanitize the input that is entered into the text box resulting into a XSS. POC:...
CVE-2012-5823
Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...
Design/Logic Flaw
Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...
CVE-2012-5823
The CVE-2012-5823 issue affects Open Source Classifieds. It describes a failure to verify that the server hostname matches the CN/subjectAltName in the X.509 certificate, enabling man-in-the-middle attacks by spoofing SSL servers with arbitrary valid certificates, related to the PHP fsockopen fun...
CVE-2012-5823
Open Source Classifieds does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the PHP...