100 matches found
bloginator 1a - (cookie bypass/sql) Multiple Vulnerabilities
No description provided by source. Author = FireShot , Jacopo Vuga. Mail = fireshotatautisticidotorg Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to = Osirys, Myral, str0ke Vulnerability = Insicure Cookie Handling CODE URL...
Mole Group Hotel Script 1.0 - Remote SQL Injection Vulnerability
No description provided by source. -+================================================================================+- -+ Mole Group Hotel Script 1.0 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...
Entertainment Directory <= 1.1 - SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Entertainment Directory = 1.1 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered...
flashlight free edition (lfi/sql) Multiple Vulnerabilities
No description provided by source. XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Flashlight Free Edition - LFI/SQL Multiple Remote Vul XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX RATM: All hell can't stop us now! XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX...
AlstraSoft AskMe Pro <= 2.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. -+================================================================================+- -+ AlstraSoft AskMe Pro = 2.1 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz...
PostNuke 0.6 Unauthenticated User Login Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3435/info PostNuke, successor to PHPNuke, is a content management system written in PHP. PostNuke versions 0.62 to 0.64 suffer from a vulnerability that allows a remote user to log-in as any user with known username and I...
PizzaInn_Project - SQL Injection
No description provided by source. + Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL...
WordPress IP-Logger Plugin <= 3.0 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress IP-Logger plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-16 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ip-logger.3.0.zip Version: 3.0 tested --- PoC ---...
Live HTTP Support (RHINO) 4.1 Cross Site Scripting Vulnerability
Live HTTP Support RHINO version 4.1 suffers from cross site scripting and remote change password vulnerabilities. Advisory: Live http support RHINO 4.1 Frontend - XSS & Remote Change Password Author: Slotleet Email: email protected Affected Software: Successfully tested on Live http support RHINO...
Live HTTP Support (RHINO) 4.1 Cross Site Scripting
Advisory: Live http support RHINO 4.1 Frontend - XSS & Remote Change Password Author: Slotleet Email: [email protected] Affected Software: Successfully tested on Live http support RHINO 4.1 Vendor URL: http://www.livesupportrhino.com Vendor Status: Not Fixed ==========================...
Videosmate Organizer 4.2 Authentication Bypass / Path Disclosure
===================================================================== Vulnerable software: Videosmate Organizer V 4.2 all versions Vendor: http://videosmate.com/ Software License: Commercial Vulns: Authentication Bypass & Path Disclosure Risk: Critical Dork: intext:Powered by Videosmate Organizer...
Santilga CMS 1.2.6.3 Cross Site Request Forgery / SQL Injection
Exploit for php platform in category web applications ============================= Vulnerable software: Santilga CMS version 1.2.6.3 $ head -n 10 Admin.php|less view-templateName = "admin"; parent::construct; $this-lang = SantilgaLanguage::getInstance-getLanguage; $this-view-lang = $this-lang;...
CVE-2012-0937
wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost...
Gap Infotech Team SQL Injection
Exploit Title: Gap Infotech Team SQL Injection Vulnerability -Google Dork-: "Powered by: Gap Infotech Team" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.gapinfotech.com Tested on: Vista Platform : php Google Dork : "Powered by: Gap Infotech Team"...
WordPress Collision Testimonials plugin <= 3.0 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Collision Testimonials plugin = 3.0 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/collision-testimonials.zip Version: 3.0...
ProPlayer plugin <= 4.7.7 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: ProPlayer plugin tablePrefix."proplayerplaylist WHERE POSTID='$id'"; $playlistRow = mysqlfetchrow$query; return $this-withBackwardCompatibility$playlistRow2; ... if !empty$GET"ppplaylistid" header"Content-type: application/xml";...
Maian Weblog 4.0 Blind SQL Injection
?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. // Check month and year vars... // If...
SquareCMS 0.3.1 (post.php) SQL Injection Vulnerability
Exploit for php platform in category web applications SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source o...
SquareCMS 0.3.1 - post.php SQL Injection
SquareCMS 0.3.1 - post.php SQL Injection SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source of post.php...
IPN Development Handler 2.0 - Multiple Vulnerabilities
IPN Development Handler 2.0 - Multiple Vulnerabilities IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script :...