12902 matches found
Frame-Oshop SQL Injection
product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno... PoC: http://www.host.com/shop/main.php?id=1111&show=rubrik&rid=-1%20union%20select%201,2,3,4,version,6,7,8,9,10,11,12 Dork: "2006 by Sdaxx Rostock" intitle:"frame-oshop" Note: -sessid had to be fre...
SlimPDF Reader PoC
No description provided by source. Slimpdf Reader from investintech, http://www.investintech.com/resources/freetools/slimpdfreader/ is prone to several overflows that can lead to code execution. The crash below is triggered by simply adding 50.000 random characters in the header of a pdf file...
HTB22979: Multiple XSS (Cross Site Scripting) vulnerabilities in Argyle Social
Vulnerability ID: HTB22979 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinargylesocial.html Product: Argyle Social Vendor: Argyle Social http://argylesocial.com/ Vulnerable Version: Current at 26/04/2011 Vendor Notification: 28 April 2011 Vulnerability...
Open Classifieds 1.7.1.1 Cross Site Request Forgery
Vulnerability ID: HTB22980 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinopenclassifieds.html Product: Open Classifieds Vendor: Open Classifieds Team http://www.open-classifieds.com/ Vulnerable Version: 1.7.1.1 and probably prior versions Vendor Notification: 28 April 2011 Vulnerability...
Argyle Social Cross Site Request Forgery
============================== Vulnerability ID: HTB22979 Reference: http://www.htbridge.ch/advisory/multiplexsscrosssitescriptingvulnerabilitiesinargylesocial.html Product: Argyle Social Vendor: Argyle Social http://argylesocial.com/ Vulnerable Version: Current at 26/04/2011 Vendor Notification:...
HTB22974: Multiple XSS in Calendarix
Vulnerability ID: HTB22974 Reference: http://www.htbridge.ch/advisory/multiplexssincalendarix.html Product: Calendarix Vendor: http://www.calendarix.com http://www.calendarix.com Vulnerable Version: 0.8.20080808 Vendor Notification: 26 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...
ZAPms 1.22 SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
ZAPms v1.22 (19.04.2011) Remote SQL Injection Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
HTB22970: Multiple XSS vulnerabilities in PHPDug
Vulnerability ID: HTB22970 Reference: http://www.htbridge.ch/advisory/multiplexssvulnerabilitiesinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type: XSS Cross Site...
HTB22969: CSRF (Cross-Site Request Forgery) in VCalendar
Vulnerability ID: HTB22969 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinvcalendar.html Product: VCalendar Vendor: UltraApps http://ultraapps.com Vulnerable Version: 1.1.5 Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level:...
EmbryoCore 1.03 Blind SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
DORG 1.1 <= CSR-Forqery PoC Exploit
Exploit for php platform in category web applications DORG 1.1 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail : submitat1337day.com 1 0 0 1 1 0 I'm KnocKout member from Inj3ct0r Team 1 1 0...
PHPDug 2.0.0 Multiple Vulnerabilities
Exploit for php platform in category web applications Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech Bridge...
PHPDug 2.0.0 - Multiple Vulnerabilities
Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Ri...
PHPDug 2.0.0 - Multiple Vulnerabilities
PHPDug 2.0.0 - Multiple Vulnerabilities Vulnerability ID: HTB22971 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinphpdug.html Product: PHPDug Vendor: Kubelabs.com http://www.kubelabs.com/ Vulnerable Version: 2.0.0 and probably prior versions Vendor Notification: 21 April 2011 Vulnerability...
VCalendar 1.1.5 Cross Site Request Forgery
Vulnerability ID: HTB22969 Reference: http://www.htbridge.ch/advisory/csrfcrosssiterequestforgeryinvcalendar.html Product: VCalendar Vendor: UltraApps http://ultraapps.com Vulnerable Version: 1.1.5 Vendor Notification: 21 April 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level:...
Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability
Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...
Path disclousure in MEGA PORTAL
Product: MEGA PORTAL Vendor: http://www.got.my Demo: http://www.got.my/MEGA-PORTAL/ Vulnerability Type: Path disclosure Risk level: medium Credit: Hector.x90 Vulnerability Details: A remote user can determine the full path to the web root directory and other potentially sensitive information. The...
Leading Edge Technology Solutions SQL Injection
========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...
(e)2 Interactive Photo Gallery 0.9 Cross Site Scripting
Vulnerability ID: HTB22966 Reference: http://www.htbridge.ch/advisory/xssine2interactivephotogallery.html Product: e2 interactive Photo Gallery Vendor: http://www.e2interactive.com http://www.e2interactive.com Vulnerable Version: 0.9 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cros...