E-Journal 1.0 Shell Upload / SQL Injection

========================================================================================== E-Journal Old Version Multiple Vulnerabilities ==========================================================================================...

[Bluebox-ng] UC/VoIP Security Tool

Bluebox-ng is a next generation UC/VoIP security tool. It has been written in CoffeeScript using Node.js powers. This project is "our 2 cents" to help to improve information security practices in VoIP/UC environments. GitHub repo : https://github.com/jesusprubio/bluebox-ng IRCFreenode :...

VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

VoltEdit CMS SQL Injection / Shell Upload

========================================================================================== VoltEdit CMS SQL Injection Admin Login Bypass & Shell Upload Vulnerability ==========================================================================================...

WordPress wp-FileManager File Download

Title: Wordpress wp-FileManager Local File Download Vulnerability Author: ByEge Download: http://wordpress.org/extend/plugins/wp-filemanager/ Test Platform: Linux Images: http://j1305.hizliresim.com/19/f/n0xxf.jpg Vuln. Plat.: Web Application Google Dorks: inurl:wp-content/plugins/wp-filemanager/...

WordPress Plugin wp-FileManager - Arbitrary File Download

Title: Wordpress wp-FileManager Local File Download Vulnerability Author: ByEge Download: http://wordpress.org/extend/plugins/wp-filemanager/ Test Platform: Linux Images: http://j1305.hizliresim.com/19/f/n0xxf.jpg Vuln. Plat.: Web Application Google Dorks: inurl:wp-content/plugins/wp-filemanager/...

ZeroClipboard 1.0.7 Cross Site Scripting

Hello list! These are Cross-Site Scripting vulnerabilities in ZeroClipboard. Last week I've made my research of these vulnerabilities and informed all developers previous and current of ZeroClipboard. When I've downloaded ZeroClipboard in September 2011, when I was writing my article Attacks via...

Simple Machines Forum 2.0.3 Path Disclosure

Summary: -------------- A security flaw allows an attacker to know the full path of the web system. Details: ----------- SSI.php Line 294: // Fetch a post with a particular ID. By default will only show if you have permission to the see the board in question - this can be overriden. function...

NTG Haber Yazilim 1 SQL Injection

Exploit Title; NTG Haber Yazilim v1 - SQL Injection Vulnerability Date ; 14/03/12 Author ; 3spi0n Script Vendor ; www.netgenel.net/index/1/ntg-haber-yazilimi-v1.html Script Demo ; http://www.netgenel.net/v1/anasayfa.php Category ; Webapps Type ; Sql Injection Tested on ; Ubuntu / Win7 Script...

TWiki Cross Site Scripting

Exploit Title: TWiki Cross Site Scripting Date: 31.01.2012 Author: Sony Software Link: http://www.twiki.org Google Dorks: intext:powered by twiki Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/01/cross-site-scripting-twiki.html...

Gregarius 0.x.x Cross Site Scripting / SQL Injection

Exploit Title: Gregarius 0.x.x SQL Injection/Cross Site Scripting Date: 7.01.2012 Author: Sony Software Link: http://www.phpkode.com/projects/item/gregarius/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

XCode SQLi/LFI/XSS and Webshell Scanning tool

XCode SQLi/LFI/XSS and Webshell Scanning tool XCode Exploit – Vulnurable & webshell Scanner help you to gather the dorks Link from Google. then you may check the results if its Vulnurable to exploit with SQL injection commands, LFI,and XSS. And You may hunt the webshells those uploaded. Download...

PHPBoost 3.0 (gallery.php) File Upload Vulnerability

Exploit for php platform in category web applications Title : PHPBoost 3.0 gallery.php File Upload Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Upload Tested on :...

Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

Joomla Component com_xgallery 1.0 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component comxgallery 1.0 Local File Inclusion Vulnerability Author: KelvinX email protected Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 21-2010 Location: HCM City, Vietna...

Immunity Canvas: FCKEDITOR

Name| FCKEditor ---|--- CVE| CVE-2009-2265 Exploit Pack| CANVAS Description| FCKEditor Notes| CVE Name: CVE-2009-2265 VENDOR: Known Vunlerable Versions: 'ColdFusion MX 8 - 8.01', 'osCMax =2.0', 'RunCMS =1.3a', 'Falt4 CMS', 'Many more to come!' Notes: This exploit has two different variants - one...

silentum-xss.txt

+===============================================================+ + Silentum LoginSys v1.0.0 XSS Cross-Site Scripting + +===============================================================+ Authors: Maximiliano Soler. Web: www.maximilianosoler.com.ar Product: Silentum LoginSys v1.0.0 Description:...

trabajando-xss.txt

+==========================================================================+ + Powered by Trabajando.com & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: ©Copyright 1999-2008. Powered by Trabajando.com Web:...

hordeturba-xss.txt

+==========================================================================+ + Horde & Turba Contact Manager & XSS Vulnerabilities + +==========================================================================+ Authors: Ivan Sanchez Product: Turba Contact Manager Web: http://www.horde.org Versions...