OneForum - topic.php SQL Injection

OneForum - topic.php SQL Injection Title : OneForum SQL Injection Vulnerability Author : Red Security TEAM Date : 22/02/2012 Risk : High Software : http://www.onescripts.de/ Download : http://www.onescripts.de/download/oneforum.zip Tested On : CentOS Contact : Info at RedSecurity . COM Home :...

LEDZ - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

LY Network Cart - SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

BrewBlogger v2.3.2 Multiple (XSRF/ShellUpload/SQLi) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

pfile <= 1.02 Multiple Vulnerabilities - Active Check

pfile is prone to a cross-site scripting XSS vulnerability and an SQL injection SQLi vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

AHLANNET SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Campaign Enterprise 11.0.421 - SQL Injection

Campaign Enterprise 11.0.421 - SQL Injection Exploit Title: Campaign Enterprise 11.0.421 SQLi Vulnerability Author: Craig Freyman @cd1zz Date Discovered: 12/12/2011 Vendor Site: http://www.arialsoftware.com Vendor Notified: 1/19/2012 Vendor Fixed: 1/30/2012 Version 11.0.512 Description: The SID...

GMS (Global Media Service) Remote SQLi Vulnerability

Exploit for php platform in category web applications GMS Global Media Service Remote SQLi Vulnerability Software : Global Media Service Date : 1/28/2012 Vendor : http://g-m-s.co.jp Get App. : order here: http://g-m-s.co.jp/hpfm.php?filehp=index.php&pageno=7&dataid=38938 Dork : intext:"Powered by...

Joomla Component com_products Multiple SQLi Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla Motor SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

glFusion CMS 1.2.2 Shell Upload / SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Tribiq SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

Newchemistry SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

EasyPage SQL Injection Vulnerability

Exploit for asp platform in category web applications Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId=...

Luxun CMS SQL Injection

Exploit Title: Luxun CMS SQL Injection Vulnerability Google Dork: "powered by luxun" Date: 7/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.marinet.gr Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

ColdFusion Zero day vulnerability : Remote File Disclosure of Password Hashes

ColdFusion Zero day vulnerability : Remote File Disclosure of Password Hashes Yesterday Blackhatacademy Released Fully automated MySQL5 boolean based enumeration tool. Today Another post expose the most critical ColdFusion vulnerability affects about a tenth of all ColdFusion servers at the...

WSN Links Script 2.3.4 - SQL Injection

WSN Links Script 2.3.4 - SQL Injection Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://scripts.webmastersite.net/wsnlinks Version...

Grebweb CMS Cross Site Scripting / SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Grebweb Cms alert0 PoC 2 Enter In Search Box XSS Code PoC : http://localhost/index.php Demo : http://www.yagyashree.com/index.php...

Infoproject Business Hero Multiple Vulnerabilities

Exploit for php platform in category web applications Infoproject Biznis Heroj login.php Authentication Bypass Vulnerability Vendor: Infoproject DOO Product web page: http://www.biznisheroj.mk Affected version: Plus, Pro and Extra Summary: Biznis Heroj or Business Hero Áèçíèñ Õåðî¼ is the first...

Voxsmart VoxRecord Control Centre 2.7 SQL Injection

======================================================================= VoxRecord Control Centre - version 2.7 Blind SQLi and auth. bypass ======================================================================= Affected Software : Voxsmart - VoxRecord Control Centre v. 2.7 Severity : Critical...