Conduit Wibiya Open URL Redirection

TITLE: Conduit Wibiya open URL Redirection vendor: Conduit Author: r007k17-w Email: [email protected] http://www.facebook.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: Modular Patterns Ltd. c 2012...

ScholarGuides Springshare Cross Site Scripting

Exploit Title: ScholarGuides Springshare Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.springshare.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/scholarguides-springshare-cross-site.html...

LibAnswers Springshare Library Cross Site Scripting

Exploit Title: LibAnswers Springshare Library Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.springshare.com/libanswers/ Google Dorks: browse.php?tid= intext:Powered by Springshare Web Browser: Mozilla Firefox Blog: http://st2tea.blogspot.com PoC:...

InsideChannel Web Design SQL Injection

Exploit Title: InsýdeChannel Web Design SQL Injection Vulnerability Date: 04/02/2012 - 14.56 Author: 3spi0n Software Website: www.insidechannel.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: noticias.php $ Demo Sites: www.bookingcerdanya.com/fr/noticias.php?id=6" SQL...

ObjectLabs Forum Systems SQL Injection

Exploit Title: ObjectLabs Forum Systems SQL Injection Vulnerability Date: 04/02/2012 - 19.15 Author: 3spi0n Software Website: http://www.objectlabs.no/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: forums.php $ Demo Sites: www.carsplusplus.com/discussions/forums.php?id=1...

Unwembi Cross Site Scripting

Exploit Title : Unwembi Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.unwembi.co.za/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Website by Unwemb...

Joomla Currency Converter Cross Site Scripting

Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...

SmartyCMS 0.9.4 Cross Site Scripting

TITLE: SmartyCMS 0.9.4 Template module Persistent XSS vendor: SmartyCMS Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: Copyright 2007 by SmartyCMS 0.9.4 built 334...

phpShowtime - Directory Traversal

phpShowtime - Directory Traversal Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

TWiki Cross Site Scripting

Exploit Title: TWiki Cross Site Scripting Date: 31.01.2012 Author: Sony Software Link: http://www.twiki.org Google Dorks: intext:powered by twiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html...

Forbes Cross Site Scripting

TITLE: FORBES Cross Site Scripting vendor: FORBES Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork:2011 Forbes.com LLC™...

Ez Album Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com/album/demo.php Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

phpShowtime Directory Traversal

Title : phpShowtime Directory Travel Author : Red Security TEAM Date : 31/01/2012 Download : http://phpshowtime.kybernetika.de/ Demo : http://phpshowtime.kybernetika.de/demo/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

phux Download Manager - Blind SQL Injection

phux Download Manager - Blind SQL Injection Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

phux Download Manager Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home :...

Studio Manolibera Listarivisteuk SQL Injection

Exploit Title: Listarivisteuk SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 27.01.2012 Platform : Php Dork: listarivisteuk.php?Id?= Demo Site : http://www.fgda.org/listarivisteuk.php?Id=1 Exploit :...

JEECMS后台任意文件编辑漏洞and官方漏洞及拿shell

简要描述： JEECMS后台任意文件编辑漏洞以及官方的demo站、官方服务器安全问题 详细说明： 2.x后台： login/Jeecms.do 3.x后台： jeeadmin/jeecms/index.do 默认账户：admin 默认密码：password 获取tomcat密码： /jeeadmin/jeecms/template/vedit.do?root=../../conf/&name=../../conf/tomcat-users.xml 获取JDBC数据库账号密码：...

VebTek CMS LFD Vulnerability

Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...

Aimoo Forums Cross Site Scripting

Exploit Title: Aimoo Forums Cross Site Scripting Date: 25.01.2012 Author: Sony Software Link: http://www.aimoo.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/aimoo-forums-cross-site-scripting.html...

Softplace CMS SQL Injection

Softplace CMS Remote SQL Injection Vulnerability Software : Softplace Date : 1/23/2012 Vendor : http://softplace.it Commercial Dork : intext:"Powered by Softplace" Author : ITTIHACK Home : http://ittihack.com Vulnerable File : index.php | indexint.php Exploit : http://site/path/index.php?pag=SQLi...