CactuShop 7 Database Disclosure

======================================================================== | Title : CactuShop v7 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v7 | Vendor : http://www.venshop.com/down/venshop2010.rar...

SQL Injection Vulnerability in the Electronic Newspaper System of Nanchang Vnet Digital Media Co.

Vnet Digital Newspaper" is a professional software product for digitizing newspapers, which can provide a perfect solution for paper newspapers to go online. It allows the original newspaper layout to be quickly and easily presented to readers through the Internet. The product suffers from SQL...

SQL Injection Vulnerability in rld Parameter of Online Exam System of Shenzhen Biaochi Information Technology Co.

The Enterprise Huitong Online Exam System is a set of professional application software suitable for the government, schools, enterprises and institutions to carry out network examination and evaluation through the Internet or local area network. There is a SQL injection vulnerability in the rld...

SQL Injection Vulnerability in Hopping Collaborative Content Management System

HZCMS is a website group content management system based on Java and XML technology. The product suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain database information. The vulnerability URL is:...

Bug Tracker 2.7.1 Information Disclosure

======================================================================== | Title : Bug Tracker V 2.7.1 database disclosure vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : https://www.twbsd.org/demo/...

Generic SQL Injection Vulnerability in BoZone Travel Software

Wuhan Bozhong E-commerce Co., Ltd. is a new technology-based enterprise specializing in travel agency management software development and sales, website production, and customized development of SME management system. A generic SQL injection vulnerability exists in Bozhong Travel Software. The la...

SQL Injection Vulnerability in Enterprise Messenger Operational SMS Platforms

Enterprise Messenger Operational SMS platform is a set of SMS operation system. The product suffers from an SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ASP Forums 2.1 Database Disclosure

| Title : ASP Forums version 2.1 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w Author : indoushka use...

AdMentor 1.00 Database Disclosure

| Title : AdMentor 1.00 Database Disclosure Exploit | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : http://adyou.me/4TVD ========================================================= !/usr/bin/perl -w AdMentor 1.00 Database Disclosure Exploit...

InterPhoto 2.3.0 Persians Database Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : http://0day.today 0 1 + Support e-mail :...

SQL Injection Vulnerability in Qibo Blog System

Zibo Blog System is a multi-user blog system. There is a SQL injection leak in the Qibo Blog System. The SQL injection vulnerability is caused due to uninitialized $TBpre in the '/blog/template/space/file/listbbs.php' function, which is registered according to a pseudo-global variable in the Qibo...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/create/ajax_do.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/create/ajaxdo.php parameter, which can be exploited by an attacker to obtain sensitive information from the database...

EMC Documentum D2 SQL Injection Vulnerability (CNVD-2015-04195)

EMC Documentum D2 is the advanced, intuitive, configurable and content-centric Documentum client that accelerates adoption of ECM applications. EMC Documentum D2 suffers from a SQL injection vulnerability in the D2DownloadService.getDownloadUrls service method, which could lead to the disclosure ...

EMC Documentum D2 SQL Injection Vulnerability (CNVD-2015-04194)

EMC Documentum D2 is the advanced, intuitive, configurable and content-centric Documentum client that accelerates adoption of ECM applications. EMC Documentum D2 has a DQL injection vulnerability in the D2CenterstageService.getComments service method that can lead to database information disclosu...

Vitubo CMS 2.3 Database Disclosure

| Title : Vitubo CMS Version 2.3 Database Disclosure Vulnerability | Author : indoushka | email : [email protected] | Dork : Copyright © 2015 Vitubo CMS Version 2.3 | Tested on: windows 8.1 Français V.Pro | Download : http://vitubo.com/ ======================================= Database...

ProductCart 2.1 Database Disclosure

!/usr/bin/perl -w ProductCart v2.1 Database Disclosure Exploit Author : indoushka Vondor : http://www.productcart.com/ use LWP::Simple; use LWP::UserAgent; system'cls'; system'ProductCart v2.1 Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request =...

SQL injection vulnerability in the id parameter of Ticketmaster ERP web-based ticketing system/flight/Html.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

Snitz Forums 2000 3.4.07 Database Disclosure

!/usr/bin/perl -w Snitz Forums 2000 v3.4.07 Database Disclosure Exploit Author : indoushka Vondor : http://forum.snitz.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Snitz Forums 2000 v3.4.07 Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request =...

Toast Forums Database Disclosure

!/usr/bin/perl -w Toast Forums Database Disclosure Exploit Author : indoushka Vondor : ToastForums.com use LWP::Simple; use LWP::UserAgent; system'cls'; system'Toast Forums Database Disclosure Exploit'; system'color a'; if@ARGV new; my $request = $useragent-get$url,":contentfile" = "D:/data.mdb";...

Onlineon E-Ticaret Database Disclosure Exploit

No description provided by source. !/usr/bin/env python -- coding:cp1254 -- Title : Onlineon E-Ticaret Database Disclosure Exploit .py dork : inurl:"default.asp?git=sepet" Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Download :...