imdbphp cross-site scripting vulnerability

imdbphp is a PHP library for retrieving movie and TV information from IMDb. A cross-site scripting vulnerability exists in imdbphp version 5.1.1, which stems from the imdbphp-master/demo/search.php URL failing to adequately filter the name parameter, and can be exploited by remote attackers to...

ClipBucket 2.8.2 Cross Site Scripting

Exploit Title: ClipBucket "promptdocument.cookie https://demo.clipbucket.com /searchresult.php?query=NoGe&type=videos"promptdocument.location https://demo.clipbucket.com /collections.php?cat=all"promptdocument.domain&sort=viewall&time=alltime&page=1&seocatname=All&sorting=sort...

affili-script.de XSS vulnerability

Vulnerable URL: http://www.affili-script.de/demo/suche.php?query=/%E2%80%9D%E2%80%93!%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E%E2%80%9D=293=suche3 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

Cross-site Scripting (XSS)

jquery-validation is vulnerable to cross-site scripting XSS attacks. The vulnerability is due to a flaw in demo/captcha. All the websites which use this jquery plugin to perform easy form validation functionality are affected...

Joomla! Component Simple Membership 3.3.3 - 'userId' SQL Injection

Exploit Title: Joomla! Component Simple Membership v3.3.3 - SQL Injection Google Dork: inurl:index.php?option=comsimplemembership Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

Joomla! Component Simple Membership 3.3.3 - userId SQL Injection

Joomla! Component Simple Membership 3.3.3 - userId SQL Injection Exploit Title: Joomla! Component Simple Membership v3.3.3 - SQL Injection Google Dork: inurl:index.php?option=comsimplemembership Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

Joomla Simple Membership 3.3.3 SQL Injection

Exploit Title: Joomla! Component Simple Membership v3.3.3 - SQL Injection Google Dork: inurl:index.php?option=comsimplemembership Date: 14.03.2017 Vendor Homepage: http://ordasoft.com/ Software :...

Car Workshop System SQL Injection

Exploit Title: Car Workshop System - SQL Injection Google Dork: N/A Date: 13.03.2017 Vendor Homepage: http://prosoft-apps.com/ Software: https://codecanyon.net/item/car-workshop-system/19562074 Demo: http://workshop.prosoft-apps.com/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author...

Property Listing Script 3.1 - SQL Injection

Property Listing Script 3.1 - SQL Injection Exploit Title: Property Listing Script v3.1 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/property-listing-script/ Demo:...

Global In - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Global In - Arbitrary File Upload Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.techbizstudio.com/ Software: https://www.techbizstudio.com/product/linkedin-clone/ Demo: https://www.techbizstudio.com/demo/globali...

Global In Shell Upload

Exploit Title: Global In - Arbitrary File Upload Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.techbizstudio.com/ Software: https://www.techbizstudio.com/product/linkedin-clone/ Demo: https://www.techbizstudio.com/demo/globalin/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

PHP Forum Script 3.0 - SQL Injection

PHP Forum Script 3.0 - SQL Injection Exploit Title: PHP Forum Script v3.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/php-forum-script/ Demo: http://demo.phpjabbers.com/index.php?demo=pfs&front=1&lid=1 Version...

Pet Listing Script 3.0 - SQL Injection

Exploit Title: Pet Listing Script v3.0 - SQL Injection Google Dork: N/A Date: 11.03.2017 Vendor Homepage: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/pet-listing-script/ Demo: http://demo.phpjabbers.com/index.php?demo=petls&front=1&lid=1 Version: 3.0 Tested on: Win7 x64, Kali...

Joomla com_product 2.2 SQL injection Vulnerability

Exploit for php platform in category web applications xBADGIRL21 N3W PUBLIC 3XPL0IT , 0day T == -- /-' // x21 Exploit Title : Joomla comproduct 2.2 SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comproduct version : 2.2 Tested on: WIN7 MyBlog :...

Price Comparison Script 2017.1.8 - SQL Injection

Price Comparison Script 2017.1.8 - SQL Injection. Webapps exploit for PHP platform Exploit Title: Price Comparison Script v2017.1.8 - SQL Injection Google Dork: N/A Date: 10.03.2017 Vendor Homepage: https://www.axisitp.com/ Software: https://www.axisitp.com/price-comparison-script.php Demo:...

WordPress PICA Photo Gallery 1.0 SQL Injection

Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo: http://www.apptha.com/demo/pica-photo-gallery Version: 1.0 Test...

Nlance Freelance Marketplace Software 2.2 SQL Injection

Exploit Title: Nlance - Freelance Marketplace Software v2.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/nlance Demo: http://demo.ncryptedprojects.com/nlance-ent/ Version: 2.2 Tested on: Win7 x64, Kali Linux x64...

Country On Sale SQL Injection

Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo: http://www.websitescripts.org/demo/countryonsalescript/ Version:...

Country on Sale Script - SQL Injection

Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo: http://www.websitescripts.org/demo/countryonsalescript/ Version:...

Country on Sale Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo:...