FS Expedia Clone - hid SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FS Expedia Clone - SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/expedia-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS...

FS Groupon Clone - category SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: FS Groupon Clone - SQL Injection Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/groupon-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS...

FS Groupon Clone SQL Injection

Exploit Title: FS Groupon Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/groupon-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contac...

FS Expedia Clone SQL Injection

Exploit Title: FS Expedia Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/expedia-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contac...

FS Expedia Clone - hid SQL Injection

FS Expedia Clone - hid SQL Injection Exploit Title: FS Expedia Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/expedia-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS...

FS Groupon Clone - category SQL Injection

FS Groupon Clone - category SQL Injection Exploit Title: FS Groupon Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/groupon-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac O...

FS Groupon Clone - 'category' SQL Injection

Exploit Title: FS Groupon Clone - SQL Injection Date: 2017-10-23 Exploit Author: 8bitsec Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/groupon-clone/ Version: 23 October 17 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: [email protected] Contac...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System's goods_id Parameter

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system v2.1.3 version goodsid parameter SQL injection vulnerability exists, because the system fails to user-supplied parameters for effective filtering...

Hanchao B2B2C Multi-User Mall System show method suffers from SQL Injection Vulnerability

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system show method SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

XSS vulnerability in ourphp

OURPHP is a PHP+MySQL based development of W3C standard building system. There is an xss vulnerability in OurPHP member center, which can be exploited by attackers to obtain administrator cookies...

MyBB Directory Traversal Vulnerability

MyBB is a popular web-based very good free forum software developed with PHP and MySQL. A directory traversal vulnerability exists in the backend of MyBB versions prior to 1.8.11, which can be exploited by a remote attacker to submit a special directory traversal request to read arbitrary files...

OpenGB 1.2.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications OpenGB version 1.2.3 Cross Site Scripting XSS Vulnerability ================================================================= Discovered by NA, NAattutanota.com ====================================== Description ============ A simple PHP MySQL...

SweetRice 1.5.1 - Arbitrary File Upload

/usr/bin/python -- Coding: utf-8 -- Exploit Title: SweetRice 1.5.1 - Unrestricted File Upload Exploit Author: Ashiyane Digital Security Team Date: 03-11-2016 Vendor: http://www.basic-cms.org/ Software Link: http://www.basic-cms.org/attachment/sweetrice-1.5.1.zip Version: 1.5.1 Platform: WebApp -...

SQL injection vulnerability in fields parameter under source/ajax.php file of doyocms system

DOYO universal station-building system using PHP and MYSQL development, is a free open source CMS station-building, enterprise station-building system , can be widely used for personal, business, government, institutions and many other website construction. doyocms system source/ajax.php file und...

Health Record System 0.1 - Authentication Bypass

Exploit Title.............. Health Record System Auth Bypass Google Dork................ N/A Date....................... 14/10/2016 Exploit Author............. lahilote Vendor Homepage............ http://www.sourcecodester.com/node/10430 Software Link...

Entrepreneur Job Portal Script 2.06 - SQL Injection

x========================================================================================================================================x | Title : Entrepreneur Job Portal Script SQL Injection | Software : Entrepreneur Job Portal Script | Version : 2.06 | Vendor : http://www.i-netsolution.com/ |...

Internet Bug Bounty: Malicious Server can force read any file on clients system with default configuration in MySQL Clients

Although it is documented that the default binary distributions of MySQL/MariaDB/Percona all seem to be compiled with allow local infile enabled, the warning is misleading. The transfer of the file from the client host to the server host is initiated by the MySQL server. In theory, a patched serv...

RealEstate CMS 3.00.50 Cross Site Scripting

i?Document Title: =============== RealEstate CMS 3.00.50 - Cross Site Web Vulnerability Release Date: ============= 2016-09-08 Vulnerability Disclosure Timeline: ================================== 2016-09-23 : Public Disclosure Product & Service Introduction: ===============================...

Joomla! Component Realtyna RPL 8.9.2 - Persistent Cross-Site Scripting Cross-Site Request Forgery

Joomla! Component Realtyna RPL 8.9.2 - Persistent Cross-Site Scripting Cross-Site Request Forgery Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client...

Xtreme Vulnerable Web Application: XVWA

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security. It’s not advisable to host this application online as it is designed to be “Xtremely Vulnerable”. It is recommended to host this application in local/controlled environment an...