CMS Made Simple Showtime2 Module 3.6.2 - (Authenticated) Arbitrary File Upload

!/usr/bin/env python Exploit Title: CMS Made Simple authenticated arbitrary file upload in Showtime2 module Date: March 2019 Exploit Author: Daniele Scanu @ Certimeter Group Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: http://viewsvn.cmsmadesimple.org/listing.php?repname=showtim...

News Website Script 2.0.5 - SQL Injection

News Website Script 2.0.5 - SQL Injection Exploit Title: News Website Script 2.0.5 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 22, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...

News Website Script 2.0.5 - SQL Injection

Exploit Title: News Website Script 2.0.5 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 22, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link : https://www.phpscriptsmall.com/product/news-website-script/ Tested Version...

Advance Gift Shop Pro Script 2.0.3 - SQL Injection

Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 21, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link : https://www.phpscriptsmall.com/product/gifts-shop/ Tested Version...

News Website Script 2.0.5 SQL Injection

Exploit Title: News Website Script 2.0.5 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 22, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link : https://www.phpscriptsmall.com/product/news-website-script/ Tested Version...

News Website Script 2.0.5 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: News Website Script 2.0.5 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 22, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...

Advance Gift Shop Pro Script 2.0.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 21, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link :...

Advance Gift Shop Pro Script 2.0.3 SQL Injection

Exploit Title: Advance Gift Shop Pro Script 2.0.3 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 21, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link : https://www.phpscriptsmall.com/product/gifts-shop/ Tested Version...

Ask Expert Script 3.0.5 - Cross Site Scripting SQL Injection

Ask Expert Script 3.0.5 - Cross Site Scripting SQL Injection Exploit Title: Ask Expert Script 3.0.5 - Cross Site Scripting / SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Discovery Date: February 19, 2019 Vendor Homepage: http://www.phpscriptsmall.com/ Software...

Twilio WEB To Fax Machine System Application 1.0 SQL Injection

Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608 Version: 1.0 Category: Webapps...

Twilio WEB To Fax Machine System Application 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fax Machine System Application 1.0 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608...

Twilio WEB To Fax Machine System Application 1.0 - SQL Injection

Twilio WEB To Fax Machine System Application 1.0 - SQL Injection Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link:...

Twilio WEB To Fax Machine System Application 1.0 - SQL Injection

Exploit Title: Fax Machine System Application 1.0 - SQL Injection Dork: N/A Date: 2019-01-13 Exploit Author: Ihsan Sencan Vendor Homepage: http://ranksol.com/ Software Link: https://codecanyon.net/item/twilio-web-to-fax-machine-system-application-php-script/22139608 Version: 1.0 Category: Webapps...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

PT-2018-4115

Name of the Vulnerable Software and Affected Versions Ice Cold Apps Servers Ultimate version 6.0.212 Description The issue allows remote attackers to execute arbitrary code by uploading PHP scripts due to a lack of authentication requirement for TELNET, SSH, or FTP. Recommendations For version...

CVE-2018-16456

CVE-2018-16456 affects PHP Scripts Mall Website Seller Script 2.0.5 with a stored XSS vulnerability triggered via a keyword (overlaps CVE-2018-6870’s Listings Search XSS). CVSS scores indicate MEDIUM severity (CVSS v3 base 6.1). Related CVE-2018-6870 describes a reflected XSS in 2.0.3 via Listing...

WordPress FV Flowplayer 7.2.0.727 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Reflected XSS in FV Flowplayer Wordpress plugin ================================================================ Author: Janek Vind "waraxe" Date: 20. September 2018 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-107.html Target...

Logicspice FAQ Script 2.9.7 - Remote Code Execution

Logicspice FAQ Script 2.9.7 - Remote Code Execution Exploit Title: Logicspice FAQ Script 2.9.7 - Remote Code Execution Dork: N/A Date: 2018-09-03 Exploit Author: Özkan Mustafa Akkuş AkkuS Vendor Homepage: https://www.logicspice.com/products/faq-script Software Link:...

Chartered Accountant : Auditor Website 2.0.1 Cross Site Scripting

Exploit Title: Chartered Accountant : Auditor Website 2.0.1 - Reflected , Stored XSS Date: 26.06.2018 Site Titel : Find your needs on Domain Name Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/cms-auditor-website/ Category: Web Application...

Chartered Accountant : Auditor Website 2.0.1 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Chartered Accountant : Auditor Website 2.0.1 - Reflected , Stored XSS Site Titel : Find your needs on Domain Name Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...