1481 matches found
Etiko CMS Cross Site Scripting / SQL Injection
SQL Injection & XSS on Etiko CMS. Risk: High CWE number: CWE-89,CWE-79 Date: 13/10/2014 Vendor: www.etikweb.com Version: All Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Windows 8 ; Chrome ; Sqlmap 1.0-dev-nongit-20140906 Vulnerables Files: /index.php & /loja/index.php...
WordPress Content Audit 1.6 Blind SQL Injection
Details ================ Software: Content Audit Version: 1.6 Homepage: http://wordpress.org/plugins/content-audit/ Advisory report: https://security.dxw.com/advisories/blind-sqli-vulnerability-in-content-audit-could-allow-a-privileged-attacker-to-exfiltrate-password-hashes/ CVE: CVE-2014-5389...
Typo3 Extension JobControl 2.14.0 - Cross-Site Scripting SQL Injection
Typo3 Extension JobControl 2.14.0 - Cross-Site Scripting SQL Injection Mogwai Security Advisory MSA-2014-02 ---------------------------------------------------------------------- Title: JobControl dmmjobcontrol Multiple Vulnerabilities Product: dmmjobcontrol Typo3 Extension Affected versions:...
Joomla Face Gallery 1.0 SQL Injection / File Download
Exploit Title : Joomla Face Gallery 1.0 Multiple Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/150 Dork Google: inurl:option=comfacegallery Date : 2014-09-17 Tested on : Window...
XRMS - Blind SQL Injection and Command Execution
No description provided by source. XRMS Blind SQLi via $SESSION poisoning, then command exec import urllib import urllib2 import time import sys usercharac =...
XRms - Blind SQL Injection / Command Execution
XRMS Blind SQLi via $SESSION poisoning, then command exec import urllib import urllib2 import time import sys usercharac = 'a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z','@','.','','-','1','2','3','4','5','6','7','8','9','0' userascii = 97,...
Pro Chat Rooms 8.2.0 XSS / Shell Upload / SQL Injection
Exploit Title: Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities Google Dork: intitle:"Powered by Pro Chat Rooms" Date: 5 August 2014 Exploit Author: Mike Manzotti @ Dionach Ltd Vendor Homepage: http://prochatrooms.com Software Link: http://prochatrooms.com/software.php Version: v8.2.0 Tested on:...
Status2k Server Monitoring Software - Multiple Vulnerabilities
No description provided by source. Exploit Title: Status2k Multiple Vulnerabilities/0days Date: 6/20/2014 Exploit Author: Shayan Sadigh twitter.com/r1pplex | [email protected] Vendor Homepage: http://status2k.com/ Version: All Tested on: Linux/Windows CVE : CVE-2014-5088, CVE-2014-5089,...
Status2k Server Monitoring Software - Multiple Vulnerabilities
Status2k Server Monitoring Software - Multiple Vulnerabilities Exploit Title: Status2k Multiple Vulnerabilities/0days Date: 6/20/2014 Exploit Author: Shayan Sadigh twitter.com/r1pplex | [email protected] Vendor Homepage: http://status2k.com/ Version: All Tested on: Linux/Windows CVE :...
Leaflet Maps Marker Pro - SQLI, XSS, Shell Upload, file delete
The leaflet-maps-marker-pro WordPress plugin was affected by a SQLI, XSS, Shell Upload, file delete security vulnerability...
bigcontact - SQLI
The BigContact Contact Page WordPress plugin was affected by a SQLI security vulnerability...
WordPress <= 1.5 - Multiple Vulnerabilities (XSS, SQLi)
...
ImpressPages CMS 3.6 - Multiple XSS/SQLi Vulnerabilities
No description provided by source. ?ImpressPages CMS v3.6 Multiple XSS/SQLi Vulnerabilities Vendor: ImpressPages UAB Product web page: http://www.impresspages.org Affected version: 3.6 Summary: ImpressPages CMS is an open source web content management system with revolutionary drag & drop...
php MBB cms 004 - Multiple Vulnerabilities
No description provided by source. MBB CMS = 004 LFI/SQLi Multiple Vulnerability By cr4wl3r http://bastardlabs.info Script http://sourceforge.net/projects/phpmbbcms/ Tested : Windows / Linux Dork : N/A LFI MBBCMS/index.php ....... 22 ifisset$GET'mod' 23 $a=$GET'mod'; 24 switch$a 25 case $a: 26...
OemPro 3.6.4 - Multiple Vulnerabilities
No description provided by source. Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure:...
Softbiz PHP Joke Site Software Multiple SQL Injection Vulnerabilities
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
iNet Online Community Blind SQLi Vulnerability
No description provided by source. Exploit Title: iNet Online Community Blind SQLi Vulnerability Author: JaMbA Script url: http://www.i-netsolution.com/online-community-php-scripts.html Tested on: Windows =================Exploit================== EXPL0!T...
WordPress Photoracer Plugin <= 1.0 - Multiple Vulnerabilities
No description provided by source. WordPress Photoracer Plugin = 1.0 Multiple XSS & SQLI Vulnerabilities Tested on Wordpress 3.2 Hebrew, Photoracer 1.0 Vulnerabilities: XSS SQL Injection Bug discovered by Pr0T3cT10n, [email protected] Date: 26/08/2011 Software Link:...
microcms 3.5 (sql/lfi) Multiple Vulnerabilities
No description provided by source. Micro CMS File inclusion Vuln Micro CMS SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5 or may be lower... File Inclusion Vuln Requires register globals to be on... Vuln file: microcms-inlude.php...