1706 matches found
Simple PHP Newsletter Administrator Password Change
"Simple PHP Newsletter" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...
WESPA PHP Newsletter 3.0 Administrator Password Change
"WESPA PHP Newsletter v3.0" Remote Admin Password Change With install path Author: alieye class : remote E-mail: [email protected] greetz: C.S.Eye Security Team members We Are: Alieye , Z0d14c , Bully13 , Stanly , Safety & All Iranian Hackers Site : www.gcmt.vcp.ir , blog : www.cseye.blogfa.com...
Diggersolutions Newsletter - Remote File Upload Vulnerabilities
Exploit for php platform in category web applications =============================================================== Diggersolutions Newsletter - Remote File Upload Vulnerabilities ===============================================================...
Diggersolutions Newsletter SQL injection Vulnerability
Exploit for asp platform in category web applications ====================================================== Diggersolutions Newsletter SQL injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...
Diggersolutions Newsletter 2.7.1 SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX. Greetz to :...
Digger Solutions NewsLetter Open Source - SQL Injection
Digger Solutions NewsLetter Open Source - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects,...
Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting / Information Leakage
Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt Proof-of-concept: http://www.example.com/el.txt...
Simpli Easy (AFC Simple) NewsLetter 4.2 - Cross-Site Scripting Information Leakage
Simpli Easy AFC Simple NewsLetter 4.2 - Cross-Site Scripting Information Leakage Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP...
SA-CONTRIB-2010-089 - Simplenews Content Selection - Cross Site Scripting
This module allows you to select content from your website and send a newsletter with the selected content. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full...
Classifieds Script - 'rate' SQL Injection
1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Classifieds SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...
Real Estate SQL Injection vulnerability
Exploit for asp platform in category web applications ======================================= Real Estate SQL Injection vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...
Real Estate - SQL Injection
Real Estate - SQL Injection Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo ...
Real Estate - SQL Injection
Description Linux And window Version available: This software is available in both windows and linux version. It runs on asp and php extension. Listings: We can add unlimited property listing, with the property photo. System automatically creates three thumbnail photo of the property. Which are...
Hotel Resort Site Script with OnLine Reservation System - SQL Injection
Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...
phplist version 2.8.11 SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================== phplist version 2.8.11 SQL Injection Vulnerability ==================================================...
PHP car rental complete System V1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================================== PHP car rental complete System V1.2 SQL Injection Vulnerability =============================================================== Title:PHP car rental complete System V1.2 SQli...
PHP Car Rental Complete System 1.2 - SQL Injection
PHP Car Rental Complete System 1.2 - SQL Injection Title:PHP car rental complete System V1.2 SQli vulnerability Author: Sid3^effects Published: 2010-06-06 price:450 EURo email:[email protected] vendor: NUNO PEREIRA url : http://www.acarhire.me.uk/ ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b...
Unfixed XSS vulnerability at www.internetsanscrainte.fr
Security researcher Xylitol, has submitted on 25/05/2010 a cross-site-scripting XSS vulnerability affecting www.internetsanscrainte.fr, which at the time of submission ranked 976829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It...
