GotoCode Online Bookstore Privilege Escalation / Database Disclosure

Exploit Title : GotoCode Online Bookstore Multiple Vulnerabilities Vulnerability : Privilege Escalation / Remote Database Download Date : 03/10/2011 Author : Nathaniel Carew Email : [email protected] Impact : High Software Link : http://www.gotocode.com/apps.asp?appid=3& Platform : ASP.NET Tested...

Vulnerability found in Flynax Classifieds products

I. BACKGROUND -------------- Flynax is a software development company which produces several CMSs to mantain different kinds of classifieds websites. II. DESCRIPTION ---------------- Nasel members discovered a critical vulnerability in the front-end of these products. The vulnerability is an SQL...

altuntop uyelik.v1 Database Disclosure Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w altuntop uyelik.V1 Database Disclosure Exploit Found & Coded: indoushka Date: 08/08/2011 Home: http://www.1337day.com/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel...

Deep throat cms file include vulnerability resulting database disclosure-vulnerability warning-the black bar safety net

Due to the presence of a file containing a vulnerability, the result can bypass the backstage access restrictions and the access to some page Detail Code Description: $controller=ABSPATH.'/ content/'.$ params'model'.'/ index.php'; //die$controller; //Load call tag iffileexistsABSPATH.'/...

ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure

Exploit Title: ManageEngine ServiceDesk new; $url="http://127.0.0.1"; $path="/workorder/FileDownload.jsp"; $installPath=&getInstallPathWin$url,$path; if $installPath ne "" @backups=&getServerOutLogs$url,$path,$installPath; else print "Install path not found :\n"; exit; if scalar@backups0 print...

ManageEngine ServiceDesk 8.0.0.12 Database Disclosure

Exploit Title: ManageEngine ServiceDesk new; $url="http://127.0.0.1"; $path="/workorder/FileDownload.jsp"; $installPath=&getInstallPathWin$url,$path; if $installPath ne "" @backups=&getServerOutLogs$url,$path,$installPath; else print "Install path not found :\n"; exit; if scalar@backups0 print...

ManageEngine ServiceDesk <= 8.0.0.12 Database Disclosure Exploit

Exploit for jsp platform in category web applications Exploit Title: ManageEngine ServiceDesk new; $url="http://127.0.0.1"; $path="/workorder/FileDownload.jsp"; $installPath=&getInstallPathWin$url,$path; if $installPath ne "" @backups=&getServerOutLogs$url,$path,$installPath; else print "Install...

ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure

ManageEngine ServiceDesk 8.0.0.12 - Database Disclosure Exploit Title: ManageEngine ServiceDesk new; $url="http://127.0.0.1"; $path="/workorder/FileDownload.jsp"; $installPath=&getInstallPathWin$url,$path; if $installPath ne "" @backups=&getServerOutLogs$url,$path,$installPath; else print "Instal...

KievShina Designs SQL Injection

+Exploit Title: KievShina Designs Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 16.6.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Designed KievShina.com" inurl:g.php + Category : Web Apps SQli...

Time Warner SQL Injection

+Exploit Title: Time Warner Company Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 18.6.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"A Time Warner Company" filetype:jsp inurl:"?id=" + Category : Web Apps WAF Evasive SQli...

PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability

Exploit for php platform in category web applications +Exploit Title: PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : inurl:"lire/index.php?rubid=" + Category : Web Apps SQli...

SE Software Technologies SQL Injection

+Exploit Title: SE Software Technologies Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 26.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered By : SE Software Technologies" filetype:php + Category : Web Apps SQli...

Cook Media Web Development Group SQL Injection

+Exploit Title: Cook Media Web Development Group Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 27.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Cook Media Group, LLC." inurl:"php?script=" + Category : Web Apps SQli...

Realmarketing CMS - Multiple SQL Injections

+Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 22.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:realweb.de inurl:default.php + Category : Web Apps SQli Choose any site that comes up when you enter the...

Realmarketing CMS SQL Injection

+Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 22.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:realweb.de inurl:default.php + Category : Web Apps SQli Choose any site that comes up when you enter the...

Realmarketing CMS - Multiple SQL Injections

Realmarketing CMS - Multiple SQL Injections +Exploit Title: Realmarketing CMS System Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 22.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:realweb.de inurl:default.php + Category : Web Apps SQli Choos...

Kyung Studios WebDesigners Database Disclosure vulnerability

Exploit for php platform in category web applications +Exploit Title: Kyung Studios WebDesigners Database Disclosure vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : intext:"Site Design by Kyung Studios" + Category : Web Apps SQli Choose any site that comes up when you...

Blue Hat Sensitive Database Disclosure SQLi Vulnerability

Exploit for php platform in category web applications +Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 12.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered by Blue Hat" + Category : Web Apps SQli Choose...

Kyung Studios WebDesigners SQL Injection

+Exploit Title: Kyung Studios WebDesigners Database Disclosure vulnerability +Author : ^Xecuti0n3r + Date : 16.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Site Design by Kyung Studios" + Category : Web Apps SQli Choose any site that comes up when you enter the dork...

Blue Hat SQL Injection

+Exploit Title: Powered by Blue Hat Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 12.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Powered by Blue Hat" + Category : Web Apps SQli Choose any site that comes up when you enter the dork...