CenterSite CMS Cross Site Scripting

Exploit Title : CenterSite Cms Cross-Site Scripting Vulnerabilitiy Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://www.centersite.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubunt...

4PSA CMS - SQL Injection

Exploit Title: 4PSA CMS SQL Injection Vulnerabilities Google Dork: "Communications solution from 4PSA." Date: 2012/02/19 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite:WwW.Black-hg.Org Software Link: http://www.4psa.com/ Version: Last Version Security...

DAPH CMS Shell Upload

Exploit Title: DAPH CMS Remote File Upload RFU Vulnerability Date: 2012-02-04 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.daph.gov.lk/ Dork: inurl:Animal Production and Health DAPH Tested on: ubuntu 11.04 CVE : -...

Anfibia Remote Command Execution

Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...

Joomla Currency Converter Cross Site Scripting

Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...

VebTek CMS LFD Vulnerability

Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...

Unfixed XSS vulnerability at yahooaction.com

Security researcher BHG Security Center, has submitted on 19/01/2012 a cross-site-scripting XSS vulnerability affecting yahooaction.com, which at the time of submission ranked 510052 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. I...

DIGIT CMS 1.0.7 Cross Site Scripting / SQL Injection

Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT" Version : 1.0.7 Tested on: ubuntu 11.04 CVE : - Finders...

Atar2b CMS 4.0.1 SQL Injection

Exploit Title: Atar2b Cms SQL Injection Vulnerability Date: 2012-01-06 GMT +7 Author: BHG Security Center Software Link: http://www.atar2b.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Atar2b ????? ?????? ?????" Version : 4.0.1 Tested on: ubuntu 11.04 CVE : - Finders: ...

DIGIT CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT"...

Priza CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications Exploit Title: Priza Israel Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.priza.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Powered by...

Priza Israel CMS 0.0.2 Cross Site Scripting / SQL Injection

Exploit Title: Priza Israel Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.priza.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Powered by Priza" Version : 0.0.2 Tested on: ubuntu 11.04 CVE : ...

Siena CMS 1.242 Cross Site Scripting

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Siena CMS 1.242 alert0 Demo : http://www.sienacms.com/index.php?page="alert0 Demo :...

Grebweb CMS Cross Site Scripting / SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Grebweb Cms alert0 PoC 2 Enter In Search Box XSS Code PoC : http://localhost/index.php Demo : http://www.yagyashree.com/index.php...

Vietsunit Script Local File Inclusion

---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not respond to the email as well as the phone. As there is not...

Tamweb CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Name: Tamweb CMS SQL Injection Vulnerability Type: ASP Category: Webapps Web Site: http://www.tamweb.ir/ Google Dork: inurl:.asp intext:"email protected" Date: 4-Nov-2011 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 II...

AtraSoft CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Neme: AtraSoft CMS SQL Injection Vulnerability Google Dork: inurl:product.php?id= intext:"Powered by AtraSoft" Version: 1.3.3 Category: Webapps Type: PHP Data: 2011/09/04 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Linux Exploit:...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities Google Dork:...

PHP Photo Album 0.4.1.16 Cross Site Scripting / Disclosure

---------------------------------------------------------------- PHP Photo Album Poc 2 http://localhost/phpAlbum/main.php?cmd=albumnew&keyword=XSS Demo :http://www.iloveazucar.com/phpAlbum/main.php?cmd=albumnew&keyword="onmouseover%3dprompt975554 bad%3d" Demo :http://www.dolfpretorius.com/main.ph...

PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple...