WhizBiz Business Directory CMS 1.9 SQL Injection

Exploit Title: WhizBiz - Business Directory CMS v1.9 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://webhelios.com/ Software Buy: https://codecanyon.net/item/whizbiz-business-directory-cms/12931569 Demo: http://whizbiz.webhelios.com/ Version: N/A Tested on: Win7 x64, Kal...

Gram Post Instagram Auto Post Multi Accounts With Paypal Integration 1.0 SQL Injection

Exploit Title: Gram Post - Instagram Auto Post Multi Accounts with Paypal integration v1.0 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://vtcreators.com/ Software Buy:...

Takas Classified Cogeigniter PHP Classified Ad Script 1.1 SQL Injection

Exploit Title: Takas Classified a Codeigniter PHP Classified Ad Script v1.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://artifectx.com/ Software Buy: https://codecanyon.net/item/takas-classified-codeigniter-php-classified-ad-script/15227824 Demo:...

Multi Outlets POS 3.1 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

Multi Outlets POS 3.1 - id SQL Injection

Multi Outlets POS 3.1 - id SQL Injection Exploit Title: Point of Sales - Multi Outlets POS v3.1 Script - SQL Injection Google Dork: N/A Date: 08.02.2017 Vendor Homepage: http://prosoft-apps.com/ Software Buy: https://codecanyon.net/item/point-of-sales-multi-outlets-pos/17674742 Demo:...

NewsBee CMS - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NewsBee CMS – SQL Injection Date: 06.02.2017 Software Link: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937?srank=2 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website:...

NewsBee CMS - SQL Injection

Exploit Title: NewsBee CMS – SQL Injection Date: 06.02.2017 Software Link: https://codecanyon.net/item/newsbee-fully-featured-news-cms-with-bootstrasp-php-mysql/19404937?srank=2 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits...

PHP Product Designer Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP Product Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-product-designer/19334412 Software Buy:...

PHP Logo Designer Script - Arbitrary File Upload

Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo: http://phplogodesigner.000webhostapp.com/ Version: N...

PHP Product Designer Script - Arbitrary File Upload

PHP Product Designer Script - Arbitrary File Upload Exploit Title: PHP Product Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-product-designer/19334412 Software Buy: https://codecanyon.net/item/php-product-designer/193344...

PHP Logo Designer Script - Arbitrary File Upload

PHP Logo Designer Script - Arbitrary File Upload Exploit Title: PHP Logo Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-logo-designer/19362231 Software Buy: https://codecanyon.net/item/php-logo-designer/19362231 Demo:...

Online Hotel Booking System Pro 1.2 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.2 - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro/4606514 Demo: http://envato.bestsoftinc.net/hotel-booking-pro/ Version: 1.2...

WordPress Online Hotel Booking System Pro 1.0 SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Demo:...

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection

Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy: https://codecanyon.net/item/online-hotel-booking-system-pro-wordpress-plugin/9338914 Demo:...

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection

WordPress Plugin Online Hotel Booking System Pro 1.0 - SQL Injection Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy:...

WordPress Online Hotel Booking System Pro 1.0 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Hotel Booking System Pro v1.0 WordPress Plugin - SQL Injection Google Dork: N/A Date: 27.01.2017 Vendor Homepage: http://www.bestsoftinc.com/ Software Buy:...

CodeCanyon iBilling 2.4 Cross Site Scripting

======================================================================== | Title : ibilling v2.4 Xss Vulnerability | Author : indoushka | email : https://www.facebook.com/Indoushka.official/ | Tested on : windows 8.1 FranASSais V.Pro | Version : v2.4 | Vendor :...

RSS News AutoPilot Script 1.0.1/3.0.3 - Cross-Site Request Forgery

Exploit Title: RSS News AutoPilot Script 1.0.1 / 3.0.3 - CSRF to Persistent XSS and RCE Through Unrestricted File Upload Date: 30 August 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Software Link: https://codecanyon.net/item/rss-news-autopilot-script/11812898 Version: 1.0.1 to 3.0.3...

WordPress CodeCanyon Real3D FlipBook 2.18.8 File Deletion / Upload / XSS

1 Unauthenticated file/directory deletion Vulnerability exists in a file 'includes/process.php' where the user input eventually goes to PHP unlink or rmdir functions. We can give any file path or directory here. We can even delete the whole wordpress site. In my POC exploit, I'm just deleting the...

WordPress Real3D FlipBook Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications + POCExploit CodeCanyon Real3D FlipBook WordPress Plugin + http://codecanyon.net/item/real3d-flipbook-wordpress-plugin/6942587 + Multiple Vulnerabilities Found by: Mukarram Khalid +...