Premium Servers List Tracker 1.0 SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 a SQL Injection Date: 02.08.2017 Vendor Homepage: https://codecanyon.net/item/premium-servers-list-tracker/19796599?srank=270 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

Premium Servers List Tracker 1.0 - SQL Injection

Exploit Title: Premium Servers List Tracker v1.0 – SQL Injection Date: 02.08.2017 Vendor Homepage: https://codecanyon.net/item/premium-servers-list-tracker/19796599?srank=270 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

WordPress FormCraft Form Builder 3.2.31 Cross Site Scripting

Exploit Title: FormCraft - Premium WordPress Form Builder Heading Heading Text input field is vulnerable. The payload will execute when the form is displayed. ================== 8bitsec - https://twitter.com/8bitsec...

PaulShop Cross Site Scripting / SQL Injection

Exploit Title: PaulShop CMS - Sql Injection and stored XSS Date: 07/23/2017 Exploit Author: BTIS Team http://www.btis.vn Vendor Homepage: https://codecanyon.net/item/paulshop-cms-with-shopping-cart-system/18070714 Version: 03/27/2017 Tested on: Apache/2.4.7 Ubuntu Contact: [email protected] Can no...

Easy File Uploader Remote Shell Upload

Exploit Title: Easy File Uploader - Arbitrary File Upload Date: 27/04/2017 Exploit Author: Daniel Godoy Vendor Homepage: https://codecanyon.net/ Software Link: https://codecanyon.net/item/easy-file-uploader-php-multiple-uploader-with-file-manager/17222287 Tested on: GNU/Linux GREETZ: Rodrigo...

Codecanyon Clone SQL Injection

Exploit Title: Codecanyon Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://codecanyonclone.bsetec.com/ Demo: http://www.bsetecdemo.com/codecanyonclone/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Codecanyon Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Codecanyon Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://codecanyonclone.bsetec.com/ Demo: http://www.bsetecdemo.com/codecanyonclone/ Version: N/A Tested on:...

Codecanyon Clone Script - SQL Injection

Exploit Title: Codecanyon Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://codecanyonclone.bsetec.com/ Demo: http://www.bsetecdemo.com/codecanyonclone/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

SchoolDir - SQL Injection

Exploit Title: SchoolDir - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.brynamics.xyz/ Software: https://codecanyon.net/item/schooldir/19326269 Demo: http://www.brynamics.xyz/schooldir/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Quadz School Management System 3.1 - uisd SQL Injection

Quadz School Management System 3.1 - uisd SQL Injection Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo:...

Viavi Product Review - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Viavi Product Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/product-review/12406163 Demo: http://viavilab.com/codecanyon/productreviewdem...

WhizBiz Business Directory CMS 1.9 SQL Injection

Exploit Title: WhizBiz - Business Directory CMS v1.9 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://webhelios.com/ Software Buy: https://codecanyon.net/item/whizbiz-business-directory-cms/12931569 Demo: http://whizbiz.webhelios.com/ Version: N/A Tested on: Win7 x64, Kal...

Takas Classified Cogeigniter PHP Classified Ad Script 1.1 SQL Injection

Exploit Title: Takas Classified a Codeigniter PHP Classified Ad Script v1.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://artifectx.com/ Software Buy: https://codecanyon.net/item/takas-classified-codeigniter-php-classified-ad-script/15227824 Demo:...

Gram Post Instagram Auto Post Multi Accounts With Paypal Integration 1.0 SQL Injection

Exploit Title: Gram Post - Instagram Auto Post Multi Accounts with Paypal integration v1.0 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://vtcreators.com/ Software Buy:...

Multi Outlets POS 3.1 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

Multi Outlets POS 3.1 - id SQL Injection

Multi Outlets POS 3.1 - id SQL Injection Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

NewsBee CMS - SQL Injection

Exploit Title: NewsBee CMS – SQL Injection Date: 06.02.2017 Software Link: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937?srank=2 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

NewsBee CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NewsBee CMS – SQL Injection Date: 06.02.2017 Software Link: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937?srank=2 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

PHP Product Designer Script - Arbitrary File Upload

PHP Product Designer Script - Arbitrary File Upload Exploit Title: PHP Product Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-product-designer/19334412 Software Buy: https://codecanyon.net/item/php-product-designer/193344...

PHP Logo Designer Script - Arbitrary File Upload

PHP Logo Designer Script - Arbitrary File Upload Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo:...