CVE-2012-1219

Multiple cross-site scripting XSS vulnerabilities in freelancerKit 2.35 allow remote attackers to inject arbitrary web script or HTML via the 1 ticket parameter to tickets.php, 2 title parameter to notes.php, or 3 task parameter to todo.php. NOTE: some of these details are obtained from third par...

Creatop SQL Injection

Exploit Title: Creatop SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.creatop.com.tw/ Date : 17.02.2012 Platform : Php Demos Site : http://www.grand-view.com.tw/chinese/06about/about.php?ID=4 SQL...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

Cross site scripting

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

CVE-2012-1066

Cross-site scripting XSS vulnerability in the template module in SmartyCMS 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the title bar...

BFT- Browser forensic tool Released by DarkCoderSc

BFT- Browser forensic tool Released by DarkCoderSc From the Developer of Famous DarkComet RAT Tool, DarkCoderSc Yesterday Release Another Interesting tool called BFT- Browser forensic tool. Browser forensic tool, is a software that will search in all kind of browser history even archived in a few...

AUTON Otomotiv Sanayi SQL Injection

AUTON Otomotiv Sanayi SQL injection Exploit Title: AUTON Otomotiv Sanayi SQL injection Vulnerability Date: 08/02/2012 - 10:34 Author: KatiLhacker Software Website: http://www.sonax.com.tr Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"haber.php?ID=" $ Demo Sites:...

Snort Report 1.3.2 Local File Inclusion

Exploit Title: Snort Report Local File Inclusion Date: 05/02/2012 Author: T0x!c Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz Version: = 1.3.2 Platform: PHP -= vuln c0de =- "/DB.php" 59 $file = join"", array"DB", $dbtype, ".php"; 60 require$file; ----exploit----...

Silverstripe CMS Cross Site Scripting

|| | | | \ | | / / \ / / | | / \ / | | \ \ / | \ / |\ \ \ /| | | | | | \ |/ | Y Y \ \ / // | / \ \ / |//|| / /|| / /\ | / /|| / / / / / / / silverstripe CMS persisten XSS vulnerabilties vendor: http://demo.silverstripe.org Author: Karthik R 3psil0nLambDa Email:...

CVE-2012-0914

Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...

Ultimate Locator SQL Injection

Exploit Title: Ultimate Locator SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://www.ultimatelocator.com/ Dork: "Powered by Ultimate Locator" Tested on: Linux/Windows 7 Vulnerable File: resultslist.php Vulnerable parameter: radius= PoC:...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

WordPress Plugin ucan post 1.0.09 - Persistent Cross-Site Scripting

Exploit Title: Wordpress uCan Post plugin window.alertdocument.cookie Email field is not sanitized but can it will check for a valid email address so the maximum result will be a reflected xss POC: [email protected]'"window.alertdocument.cookie Post Title is not sanitized and it's injectable with a...

Proof Cast Design SQL Injection

Exploit Title: Proof Cast Design SQL Injection Vulnerability Date: 18/01/2012 - 04.13 Author: 3spi0n Software Website: http://proofcast.com/purplewebsites.php Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ $ Demo Sites: www.onlyfineknives.com/knife.php?k=244859"...

PhpBridges Blog System SQL Injection

Exploit Title: PhpBridges Blog System SQL Injection Vulnerability Date: 18/01/2012 - 04.19 Author: 3spi0n Software Website: https://launchpad.net/phpbridges Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo Sites: fantasticas.odisseias.net/members.php?id=2...

CVE-2011-4360

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the 1 curid or 2 oldid parameter...

CVE-2011-4360

MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the 1 curid or 2 oldid parameter...

2xPress Cross Site Scripting / SQL Injection

Exploit Title: 2xPress Web Multiple Vulnerability Date: 08/12/2011 - 23:32 Author: 3spi0n Software Website: http://www.2xpress.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Developed by 2xpress.com" Vulnerable File : All $ Demo Sites:...

YSD Web Design SQL Injection

Exploit Title: Ysd Web Design Sql Injection Vulnerability Date: 20/11/2011 - 03:18 Author: 3spi0n Software Website: http://www.ysd.hk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by YSD" $ Demo Sites:...