"Simple PHP Newsletter" Remote Admin Password Change With install path

"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com downl...

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

Simple PHP Newsletter Administrator Password Change

"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

WESPA PHP Newsletter 3.0 Administrator Password Change

"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...

Diggersolutions Newsletter - Remote File Upload Vulnerabilities

Exploit for php platform in category web applications =============================================================== Diggersolutions Newsletter - Remote File Upload Vulnerabilities ===============================================================...

Diggersolutions Newsletter 2.7.1 SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX. Greetz to :...

Diggersolutions Newsletter SQL injection Vulnerability

Exploit for asp platform in category web applications ====================================================== Diggersolutions Newsletter SQL injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

Digger Solutions NewsLetter Open Source - SQL Injection

Digger Solutions NewsLetter Open Source - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects,...

Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting Information Leakage

Simpli Easy AFC Simple NewsLetter 4.2 - Cross-Site Scripting Information Leakage Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP...

Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting / Information Leakage

Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt Proof-of-concept: http://www.example.com/el.txt...

SA-CONTRIB-2010-089 - Simplenews Content Selection - Cross Site Scripting

This module allows you to select content from your website and send a newsletter with the selected content. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full...

Classifieds Script - 'rate' SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Classifieds SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...

Real Estate SQL Injection vulnerability

Exploit for asp platform in category web applications ======================================= Real Estate SQL Injection vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Real Estate - SQL Injection

Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...

Real Estate - SQL Injection

Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo of the property. Which are...

Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...

phplist version 2.8.11 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== phplist version 2.8.11 SQL Injection Vulnerability ==================================================...

PHP Car Rental Complete System 1.2 - SQL Injection

PHP Car Rental Complete System 1.2 - SQL Injection Title:PHP car rental complete System V1.2 SQli vulnerability Author: Sid3^effects Published: 2010-06-06 price:450 EURo email:[email protected] vendor: NUNO PEREIRA url : http://www.acarhire.me.uk/ ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b...

PHP car rental complete System V1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== PHP car rental complete System V1.2 SQL Injection Vulnerability =============================================================== Title:PHP car rental complete System V1.2 SQli...

Unfixed XSS vulnerability at www.internetsanscrainte.fr

Security researcher Xylitol, has submitted on 25/05/2010 a cross-site-scripting XSS vulnerability affecting www.internetsanscrainte.fr, which at the time of submission ranked 976829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It...