SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits ================================================================= SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH ================================================================= Exploit Title: SnackAmp 3.1.3B Malicious SMP...

WAnewsletter 2.1.2 - SQL Injection

================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author: [email protected] Software...

CVE-2010-3482: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in cmswrite.php in Primitive CMS 1.0.9 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 title and 2 menutitle parameters. NOTE: this can be leveraged with CVE-2010-3483 to conduct attacks without authentication...

CVE-2010-3483: Undefined Security Weakness

cmswrite.php in Primitive CMS 1.0.9 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request. NOTE: this vulnerability can be leveraged to conduct cross-site scripting attacks, as demonstrated using the 1 title, 2 content, and 3...

Fashione E-Commerce Webshop SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: Fashione E-Commerce Webshop Multiple SQL Injection Vulnerabilities Date: 2010-09-19 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site : swissfaking.net/board Software Link: http://www.fashione.co.uk/ Version: All...

BoutikOne 1.0 - SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: BoutikOne® v1 list.php SQL Injection Vulnerabilitie Date: 19/09/2010 Author: BrOx-Dz Author: [email protected] Software Link: http://www.boutikone.com/ Dork : Powered by BoutikOne® Version: BoutikOne® Tested on: windows xp pack 3...

freediscussionforums 1.0 - Multiple Vulnerabilities

freediscussionforums 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Pc4Uploader 9.0 Cross Site Request Forgery

Exploit Title: pc4uploader XSRF Add Admin Exploit Date: 27-08-2010 Author: RENO TeaM : SauDi ViRuS TeaM SiTe: WwW.Sa-ViRuS.CoM Software Link: http://www.pc4arb.com/product-10.html SvT Pc4Uploader - XSRF Add Admin Exploit Author : RENO TeaM : SauDi ViRuS TeaM Site : WwW.Sa-ViRuS.CoM Email :...

iGaming CMS - Multiple SQL Injections

Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hight...

Adobe Dreamweaver CS4 - 'ibfs32.dll' DLL Hijacking

/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...

Ananta Gazelle CMS Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Ananta Gazelle CMS Multiple Vulnerabilities =========================================== Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact ...

Karaoke Video Creator Denial Of Service

Exploit Title: Karaoke Video Creator Denial of Service Vulnerability Author: PASSEWORD Date: 2010-08-20 Software Link: http://www.powerkaraoke.com/src/prod-karaoke-video-creator.php Version : 2.2.8 Greetz 2 : d4rk-h4ck3r , And All Muslims And Tunisian Hackers Tested on: Windows XP SP3 Fr $buff="A...

CVE-2010-3023

Multiple cross-site scripting XSS vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 categorydescription parameter to user/main/updatecategory, which is not properly handled by app/views/categories/index.html.erb; an...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 categorydescription parameter to user/main/updatecategory, which is not properly handled by app/views/categories/index.html.erb; an...

CVE-2010-3023

Multiple cross-site scripting XSS vulnerabilities in DiamondList 0.1.6, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 categorydescription parameter to user/main/updatecategory, which is not properly handled by app/views/categories/index.html.erb; an...

CVE-2010-2577: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Pligg before 1.1.1 allow remote attackers to execute arbitrary SQL commands via the title parameter to 1 storyrss.php or 2 story.php...

Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

No description provided by source. Exploit Title: Windows Live Messenger = 14.0.8117 animation remote Denial of Service Date: 11/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://explore.live.com/windows-live-messenger Version: 14.0.8117 and prior Tested on: Windo...

Kleeja Upload - CSRF Change Admin Password

Exploit for php platform in category web applications ========================================== Kleeja Upload - CSRF Change Admin Password ========================================== Exploit Title: Kleeja Upload - CSRF Change Admin Password Date: 11-08-2010 Author: KOLTN & email protected Softwar...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...