EasySiteEdit - Remote File Inclusion

EasySiteEdit - Remote File Inclusion Exploit Title: EasySiteEdit remote file include Date:2011 Author:koskesh jakesh Software Link: http://www.easysiteedit.com/licensesystem/esev2versions/esev2.zip Tested on: linux ------------------------------- vul:sublink.php line 20: include$REQUEST'langval';...

Zen Media Player (.pls) Local Crash Poc

Exploit for windows platform in category dos / poc Exploit Title:Zen Media Player .pls Local Crash Poc Date: 20/8/2011 Author: Angel Injection home Page: http://www.club-h.co.cc , http://www.sec-krb.org Email: Angel-Injectionathotmail.com Category:: dos / poc Tested on: Windows Xp Sp3...

WordPress Plugin Global Content Blocks 1.2 - SQL Injection

Exploit Title: WordPress Global Content Blocks plugin 0 // intval"1a" = 1 : $entry = $wpdb-getrow"select from ".$wpdb-prefix."gcb where id=".$id; $finaltext = base64encode$entry-name."". base64encode$entry-description."". base64encode$entry-value."". base64encode$entry-type;...

WordPress Plugin Global Content Blocks 1.2 - SQL Injection

WordPress Plugin Global Content Blocks 1.2 - SQL Injection Exploit Title: WordPress Global Content Blocks plugin 0 // intval"1a" = 1 : $entry = $wpdb-getrow"select from ".$wpdb-prefix."gcb where id=".$id; $finaltext = base64encode$entry-name."". base64encode$entry-description.""...

WordPress Plugin Menu Creator 1.1.7 - SQL Injection

WordPress Plugin Menu Creator 1.1.7 - SQL Injection Exploit Title: WordPress Menu Creator plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $menuid = $GET'menuid'; ... $firstitem = $wpdb-getrow"SELECT FROM " . $wpdb-prefix."menuitems WHERE...

WP-Stats-Dashboard 2.6.5.1 Cross Site Scripting

Vulnerability ID: HTB23035 Reference: http://www.htbridge.ch/advisory/multiplexssinwpstatsdashboard.html Product: WP-Stats-Dashboard Vendor: Dave Ligthart http://www.daveligthart.com Vulnerable Version: 2.6.5.1 and probably prior Tested on: 2.6.5.1 Vendor Notification: 27 July 2011 Vulnerability...

WordPress Contus HD FLV Player 1.3 SQL Injection

Exploit Title: WordPress Contus HD FLV Player plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0&listItem=1 --------------- Vulnerable code --------------- $pid1 = $GET'playid'; foreach $GET'listItem' as $position = $item : mysqlquery"UPDATE $wpdb-prefix" . "hdflvmed2play SET sorder =...

SoftwareDEP Classified Script 2.5 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID -----------------------------------------------------------------------...

WordPress Plugin Ajax Gallery 3.0 - SQL Injection

Exploit Title: WordPress Ajax Gallery plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- if isset $GET 'delete' && isset $GET'gId' $wpdb-query "DELETE FROM $wpdb-options WHERE optionname='agItem' and optionid=".$GET'gId' ; echo "Galeria...

SoftwareDEP Classified Script 2.5 - SQL Injection (1)

SoftwareDEP Classified Script 2.5 - SQL Injection 1 / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla! Component JoomTouch 1.0.2 - Local File Inclusion

Joomla! Component JoomTouch 1.0.2 - Local File Inclusion ================================================================================ o JoomTouch Joomla Component = Local File Inclusion Vulnerability Software : comjoomtouch ver 1.0.2 Vendor : http://www.joomtouch.com/ Author : NoGe Contact :...

SoftwareDEP Classified Script SQL Injection Vulnerability

Exploit for php platform in category web applications / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla JoomTouch 1.0.2 Local File Inclusion

================================================================================ o JoomTouch Joomla Component = Local File Inclusion Vulnerability Software : comjoomtouch ver 1.0.2 Vendor : http://www.joomtouch.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

Joomla! Component JoomTouch 1.0.2 - Local File Inclusion

================================================================================ o JoomTouch Joomla Component = Local File Inclusion Vulnerability Software : comjoomtouch ver 1.0.2 Vendor : http://www.joomtouch.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom Home :...

RealPlayer 12.0.1.660 Stack Hash/Crash POC

Exploit for windows platform in category dos / poc =========================================== RealPlayer 12.0.1.660 Stack Hash/Crash POC =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Surge-FTP 23b6 Cross Site Scripting

Exploit Title : Surge-FTP v23b6 Admin multiple reflected XSS Vulnerabilities Authored by : Houssam Sahli = backtronuxgmailcom Date : 16/08/2011 Vendor: NetWin Product web page: http://netwinsite.com download link : http://netwinsite.com/ftp/surgeftp/surgeftp23b6windows.exe Affected version: v23b6...

VLC Media Player 1.1.10 The Luggage (libplaylist_plugin.dll) Terminate POC

Exploit for windows platform in category dos / poc ============================================================================ VLC Media Player 1.1.10 The Luggage libplaylistplugin.dll Terminate POC ============================================================================...

Windows Internet Explorer 9.0.1 Stack Hash/Crash POC

Exploit for windows platform in category dos / poc ====================================================== Windows Internet Explorer 9.0.1 Stack Hash/Crash POC ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

F-secure Browsing Protection (fsgkiapi.dll) Plugin Terminate POC

Exploit for windows platform in category dos / poc ================================================================== F-secure Browsing Protection fsgkiapi.dll Plugin Terminate POC ==================================================================...

Media Player Classic v1.2.1008 - ALPlayer 10.1029 (ALPSource.ax) Crash

Exploit for windows platform in category dos / poc ============================================================================ Media Player Classic v1.2.1008 - ALPlayer 10.1029 ALPSource.ax Crash POC ============================================================================...