Mambo Component N-Gallery - SQL Injection

source: https://www.securityfocus.com/bid/49418/info The Mambo CMS N-Gallery component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Mambo Component N-Press - SQL Injection

Mambo Component N-Press - SQL Injection source: https://www.securityfocus.com/bid/49420/info The Mambo CMS N-Press component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

Mambo Component N-Press - SQL Injection

source: https://www.securityfocus.com/bid/49420/info The Mambo CMS N-Press component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Mambo Component N-Myndir - SQL Injection

source: https://www.securityfocus.com/bid/49424/info The Mambo CMS N-Myndir component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the applicatio...

Mambo N-Gallery SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-gallery SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-gallery Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Namskeid Cross Site Scripting

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-namskeid XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-namskeid Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Myndir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Skyrslur Cross Site Scripting

------------------------------------------------------------------------------------------------------------------------------- Exploit Title: Mambo Component comn-skyrslur XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-skyrslur Date: 01/09/2011 Author: CoBRa21...

Mambo N-Press SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-press SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-press Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-shop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-shop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Frettir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-frettir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-frettir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =============================================== Recover MyFiles 3.8.4.3300 DLL Hijacking Exploit =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 1 1 | | | | | | | | | | | | \ \ / / 0 ...

MP3 CD Converter Professional 5.3.0 Overflow

!/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack from...

A-PDF All to MP3 2.3.0 - Universal DEP Bypass

!/usr/bin/ruby +Exploit Title: A-PDF All to MP3 v2.3.0 Universal DEP Bypass Exploit +Date: 09\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.a-pdf.com/all-to-mp3/ +Version: 2.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A Dep bypass method: LoadLibraryA"kernel32.dll" +...

ZipWiz 2005 5.0 - '.zip' Buffer Corruption

!/usr/bin/perl +Exploit Title: ZipWiz 2005 v5.0 .ZIP File Buffer Corruption Exploit +Date: 08\07\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/ZipWiz-2005/3000-22504-10011590.html +Version: v5.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A use strict; use warnings; ...

FreeAmp .pls Buffer Overflow Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python +Exploit Title: FreeAmp 2.0.7 .PLS File Buffer Overflow Exploit +Date: 24\06\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.exploit-db.com/application/17441/ +Version: 2.0.7 +Tested On: WIN-XP SP3 Brazilian Portugues...

N-13 News 4.0.1 Cross Site Scripting

Vulnerability ID: HTB23005 Reference: http://www.htbridge.ch/advisory/multiplexssinn13news.html Product: N-13 News Vendor: Network-13 http://network-13.com/ Vulnerable Version: 4.0.1 and probably prior Tested on: 4.0.1 Vendor Notification: 25 May 2011 Vulnerability Type: XSS Cross Site Scripting...

HTB23005: Multiple XSS in N-13 News

Vulnerability ID: HTB23005 Reference: http://www.htbridge.ch/advisory/multiplexssinn13news.html Product: N-13 News Vendor: Network-13 http://network-13.com/ Vulnerable Version: 4.0.1 and probably prior Tested on: 4.0.1 Vendor Notification: 25 May 2011 Vulnerability Type: XSS Cross Site Scripting...

Cross-site Scripting Vulnerabilities in N-13 News

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in N-13 News, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerabilities in N-13 News 1.1 Input passed via the GET "id" parameter to index.php is not properly sanitised...

OpenMyZip 0.1 .ZIP Buffer Overflow

!/usr/bin/perl +Exploit Title: OpenMyZip V0.1 .ZIP File Buffer Overflow Vulnerability +Date: 02\05\2011 +Author: C4SS!0 G0M3S +Software Link: http://download.cnet.com/OpenMyZip/3000-22504-10657274.html +Version: v0.1 +Tested On: WIN-XP SP3 Brazil Portuguese +CVE: N/A use strict; use warnings; my...