Zoho ManageEngine Desktop Central Directory Traversal Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A directory traversal...

CVE-2018-5337

An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPTNAME field when modifying existing scripts...

DEBIAN-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

Mail.ru: XSS on e.mail.ru via postMessage

URI Get parameters based XSS in https://e.mail.ru/cgi-bin/login via combination of factors controllable script name via NUL characters inection, availability of script with known vulnerability within domain...

Vine VideoSite Creator Script - SQL Injection

Vine VideoSite Creator Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Vine VideoSite Creator Script Script Buy Now: http://www.scriptfolder.com/scriptfolder-vinezone-vine-videosite-creator-script/ Author: Ihsan Senca...

Image and Video Script - SQL Injection

Image and Video Script - SQL Injection Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Image and Video Script Script Buy Now: http://www.scriptfolder.com/funzone-image-and-video-script/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail...

Classifieds Script - 'term' SQL Injection

Vulnerability: SQL Injection Date: 19.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Classifieds Script Script Buy Now:http://www.scriptfolder.com/scriptfolder-classifieds/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQL Injection/Exploit ...

Clone Of Oddee Script 1.1.3 SQL Injection

Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/cool-planet-clone-of-oddee/ Author: Ihsan Sencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet SQ...

My Private Tutor Website Builder Script SQL Injection

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: My Private Tutor Website Builder Script Script Buy Now: http://www.popularclones.com/products/My-Private-Tutor-Website-Builder Author: Ihsan Sencan Author Web:...

Flippa Website Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Flippa Website Script Script Buy Now: http://www.popularclones.com/products/Flippa-Website Author: Ihsan Sencan...

Questions and Answers Script 1.1.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection Date: 15.01.2017 Vendor Homepage: http://www.scriptfolder.com/ Script Name: Questions and Answers Script V1.1.3 Script Buy Now: http://www.scriptfolder.com/questions-and-answers/ Author: Ihsan Sencan Author Web:...

Fileserve Clone Script - Authentication Bypass

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

Wetransfer Clone Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Wetransfer Clone Script Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script Author: Ihsan...

Fileserve Clone Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Fileserve Clone Script Script Buy Now: http://www.scriptgiant.com/software/32/fileserve-script Author: Ihsan Sencan...

Online Tshirt Design Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Online Tshirt Design Script Script Buy Now: http://www.popularclones.com/products/Online-Tshirt-Designer Author:...

Justdial Clone Script - Authentication Bypass

Justdial Clone Script - Authentication Bypass Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Justdial Clone Script Script Buy Now: http://www.popularclones.com/products/Justdial-Directory Author: Ihsan Sencan Author...

Wetransfer Clone Script - Authentication Bypass

Vulnerability: SQL Injection + Authentication Bypass Date: 18.01.2017 Vendor Homepage: http://www.scriptgiant.com/ Script Name: Wetransfer Clone Script Script Buy Now: http://www.popularclones.com/products/File-Transfer-Script Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

9 Network Linkedin Clone Script - Improper Access Restrictions

Vulnerability: Improper Access Restrictions Date: 15.01.2017 Vendor Homepage: http://theninehertz.com Script Name: 9 network Linkedin Clone – Classified Ads Script Script Version: v1.0 Script Buy Now: http://theninehertz.com/linkedin-clone Author: İhsan Şencan Author Web: http://ihsan.net Mail :...

MC Yellow Pages Script - SQL Injection

MC Yellow Pages Script - SQL Injection Vulnerability: SQL Injection Web Vulnerability Date: 15.01.2017 Vendor Homepage: http://microcode.ws/ Script Name: MC Yellow Pages Script Script Buy Now: http://microcode.ws/product/mc-yellow-pages-php-script/3800 Author: İhsan Şencan Author Web:...

Hindu Matrimonial Script - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-scrip...