WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery Add Catetory Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps...

WordPress Lazy Content Slider 3.4 Plugin - Cross-Site Request Forgery (Add Catetory)

Exploit for php platform in category web applications Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4...

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...

Parsijoo Cross Site Scripting

================================================================================ Cross Site Scripting on Search Engine Parsijoo ================================================================================ Author: bl4ckmohajem [email protected] home page : http://www.parsijoo.ir/...

Parishcouncil CMS SAS4.5 Cross Site Scripting

Exploit Title : Parishcouncil CMS SAS4.5 / Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.parishcouncilwebsites.com/updating.php Category: Webapps Tested on: Win Version: SAS4.5 Date: 2016/06/21 PoC: yr Get Parameter Vulnerable To XSS Payload : ' Demo :...

Joomla! Component com_bt_media 1.0 - SQL Injection

Joomla! Component combtmedia 1.0 - SQL Injection Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Paramete...

CMS Elevel 1.0 Cross Site Scripting / SQL Injection

Exploit Title : CMS Elevel 1.0 - SQL Injection / XSS Exploit Author : Persian Hack Team Vendor Homepage : http://www.elevel.it/privacy.php Google Dork : "Web Design by Elevel" inurl:news.php Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: id Parameter Vulnerable To SQL / XSS...

Joomla! Component com_bt_media 1.0 - SQL Injection

Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Parameter Vulnerable To SQL Demo :...

Joomla BT Media Component (com_bt_media) - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0=...

Joomla BT Media 1.0 SQL Injection

Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Parameter Vulnerable To SQL Demo :...

Joomla Catfiltering 1.5.4 SQL Injection

Exploit Title : Joomla comcatfiltering - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comcatfiltering Category: Webapps Tested on: Win Version: 1.5.4 Date: 2016/06/14 PoC: flt1= Get Parameter Vulnerable To SQL Demo :...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Joomla! Component compayplans 3.3.6 - SQL Injection Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter Vulnerable To SQL Demo :...

Joomla Affiliate Tracker 2.0.3 SQL Injection

Exploit Title : Joomla comaffiliatetracker - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/affiliate-tracker Category: Webapps Tested on: Win Version: 2.0.3 Date: 2016/06/13 PoC: First Login To Panel And Go To Affiliate Tracker userid...

Joomla! Extension PayPlans (com_payplans) 3.3.6 - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla Pay Plans 3.3.6 SQL Injection

Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter Vulnerable To SQL Demo :...

Joomla Affiliate 1.0.3 SQL Injection

Exploit Title : Joomla comaffiliate - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comaffiliate Category: Webapps Tested on: Win Version: 1.0.3 Date: 2016/06/13 PoC: --Bypass Authentication http://www.site.com/index.php?option=comaffiliate&view=login...

Joomla Maqma Helpdesk 4.2.3 Cross Site Scripting

Exploit Title : Joomla commaqmahelpdesk - XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/maqma-helpdesk Category: Webapps Tested on: Win Date: 2016/06/09 Version : 4.2.3 PoC: Add Your Tiket sometimes you must login First in Message Te...

Joomla Joomdoc 4.0.3 Path Disclosure

Exploit Title : Joomla comjoomdoc - Full Path Disclosure Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/joomdoc Category: Webapps Tested on: Win Version: 4.0.3 Date: 2016/06/08 PoC: Full Path Disclosure FPD vulnerabilities enable the...

Joomla AvailCal 05 SQL Injection

Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...