Joomla ContusHDVideoShare com_contushdvideoshare - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component comcontushdvideoshare - Arbitrary File Download Vulnerability Google Dork: "comcontushdvideoshare" Date: 25/01/2015 Exploit Author: X-Line Empire North - Tetouan Vendor Homepage: Dork : www.hdflvplayer.net...

OpenSchool Community Edition 2.2 XSS / Access Bypass

Exploit Title: OpenSchool Community Edition version 2.2 Multiple Vulnerabilities Date: 25 January 2015 Exploit Author: Mahendra Vendor Homepage: www.open-school.org Software Link: http://sourceforge.net/projects/fiyo-cms/ Full version demo: http://www.tryopenschool.com Version: 2.2 Tested : Kali...

YXcms建站系统最新版储存XSS盲打后台（demo+本地演示）

简要描述： 缺个移动硬盘存片子 详细说明： 上次提交说是self-xss没给过，为了证明不是self-xss，这次盲打后台一下吧 demo演示 首先来到YXCMS的demo站点http://demo.yxcms.net 然后注册个账号，在邮箱那里直接插入"/ 可以看到没有任何过滤，直接提示信息编辑成功 返回后直接弹窗 上次截止到这里就停了，并没有看能不能打后台，因为他这个demo是不提供后台演示的（可能怕被后台拿shell吧，哈哈 https://images.seebug.org/upload/201501/20104758ae72a78e0...

LebiShop商城系统最新版SQL注入一(同一文件多处)

简要描述： LebiShop商城系统最新版SQL注入一，同一文件多处，官方demo演示 详细说明： LebiShop商城系统最新版V3.1.00，多处存在SQL注入漏洞，可拖库 更多案例： 使用关键字搜索：powered by LebiShop 可搜索大量使用用户 反编译/bin/shop.dll，在SHop.Ajax中的Ajaxorder文件中存在多处SQL注入漏洞 SHop.Ajax.Ajaxorder即根目录下的Ajax目录，Ajaxorder文件 第一处SQL注入 我们来看看Ajaxorder文件中的AddressDel方法： // Shop.Ajax.Ajaxorder...

华天动力储存XSS（11处打包，非self-xss）

简要描述： 缺个移动硬盘存片子 详细说明： 上次提交说是self-xss，为了证明不是self-xss，这次打一下管理cookie吧 demo演示，涉及大量政府，医院，房产，电视台等网站：http://www.oa8000.com/solution.htm 首先还是来到官网，看到demo演示地址：http://demo.oa8000.com 然后先用官方提供的普通用户登录 存在XSS的地方在：客户管理--我的客户--新建...

Wordpress Theme Terra Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Theme Terra Arbitrary File Download Vulnerability Date: 18/01/2015 Exploit Author: t3rr0rist - GHC Georgian Hacking Community team Contact : email protected Tested on: Linux Google Dork: inurl:"wp-content/themes/terra/...

帝友P2C借贷系统前台getshell#1

简要描述： 帝友P2C借贷系统前台getshell1 详细说明： 这次是帝友公司旗下出的另一套电子商务cms 不是帝友p2p！ 官方最新版本是 帝友P2C借贷系统V1.01 上传头像处存在getshell 已官方演示站做演示 已注册账号，账号密码都是test1a 访问 http://p2c.diyou.cc/?user&m=approve/safe 上传头像，抓包 修改数据包，插入一句话木马，修改后缀为php后缀 虽然回显500，但是phpshell已经上传了 dyupfiles/avatar/diyou/用户id.php 得到...

Cool official silent install apk features background the presence of high-risk vulnerabilities(demo custom machine is how in your phone silently installed)-bug warning-the black bar safety net

Cool Demo junk software is how to through your mobile phone to silently install Suction fee software what is going on. You charge less? Detailed description: Cool a operation and maintenance improper shell. ! ! ! ok See under background: http://auth.coolyun.com ! Background PUSH features APK sile...

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process(x64)-vulnerability warning-the black bar safety net

Bypass 3 6 0 core crystal engine again forced the end of the 3 6 0 process, in the face of success, The morning presented a 6 4-bit lower kill360 small toys But it wasn't long before I was hit the face. 3 6 0 say that there is a core crystal engine. We first do not say this T coax coax contraptio...

phpyun v3.2 (20141222) 无需登录无视过滤注入一枚。

简要描述： 无需登录。 最新版本。 demo测试。 功能越多 bug越多 bug越多 rank越多。 详细说明： 在model/subscribe.class.php中 function certaction if$GET'id' $arr=@explode"|",base64decode$GET'id';//当时我就震惊了。。。 $email = $arr0; $code = $arr1; $nid=$this-obj-DBupdateall"subscribe","status='1'","email='".$email."' and code='".$code."'";...

HackerOne: Reflected File Download

Info: Reflected File Download is a new web attack vector. It allows an attacker to craft a malicious file and present it to a victim, but there is no file present at the server. It was recently published at the BlackHat Eupore 2014 by Oren Hafif. Link to his presentation is given at the end...

KesionCMS最新版本可伪造任何人发表评论

简要描述： KesionCMS最新版本可伪造任何人发表评论 详细说明： 1.首先登陆官网的一个demo http://demo.kesioncms.com 2.随便找一条贴子发表评论 这里就找到了管理员更新的一篇文章 url:http://demo.kesion.com/html/xwpd/gn/2629.html 3.发表评论.得到请求的url...

WordPress Html5 Mp3 Player Full Path Disclosure

WordPress - Html5 Mp3 Player with Playlist Plugin / || / / / / /\ /\ \ \ \ | / \ / http://h4x0resec.blogspot.com / \ | \ \ / // / \ / / / / Software info |App. : WordPress - html5-mp3-player-with-playlist Plugin |Software: https://wordpress.org/plugins/html5-mp3-player-with-playlist/...

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

DEBIAN-CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

Cross site scripting

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

UBUNTU-CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

CVE-2012-6662

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

RobotStats 1.0 - 'robot' SQL Injection

Title : RobotStats v1.0 robot param SQL Injection Vulnerability Author : ZoRLu / [email protected] / [email protected] Home : http://milw00rm.com / its online Twitter : https://twitter.com/milw00rm or @milw00rm Date : 22.11.2014 Demo : http://alpesoiseaux.free.fr/robotstats/ Download :...