Joomla! Component com_idoblog - SQL Injection

Exploit Title: joomla comidoblog /SQL injection Vulnerability Google Dork: inurl:"comidoblog" Date: 25/12/2010 Author: NOCKAR1111 Location:Algeria AuthorEmail:[email protected] Language: php Tested on: windows xp sp3 en http://extensions.joomla.org/extensions/news-production/blog/9218...

LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhanced Local File Inclusion

Hello full-disclosure! Description: Joomla CBE suffers from a local file inclusion vulnerability. As CBE also offers file uploading functionality that allows to upload files that contain php-code, this can be used to execute arbitary system-commands on the host with the webservers privileges. Ris...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...

DMXReady Members Area Manager - Persistent Cross-Site Scripting

DMXReady Members Area Manager - Persistent Cross-Site Scripting Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: DMXReady Members Area Manager Persistent XSS Vendor url:http://www.dmxready.com/ Version:2 Price:295$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effect...

Buy Dating Persistent Xss

Exploit for php platform in category web applications ========================= Buy Dating Persistent Xss ========================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

iScripts EasyBiller Cross Site Scripting

$------------------------------------------------------------------------------------------------------------------- $ iScripts EasyBiller Cross Site Scripting Vulnerabilities $ Author : Sangteamtham $ Home : Hcegroup.net $ Download : http://www.iscripts.com/easybiller/ $ Date : 02/07/2010 $ Emai...

2DayBiz Video Community Portal - user-profile.php SQL Injection

2DayBiz Video Community Portal - user-profile.php SQL Injection $------------------------------------------------------------------------------------------------------------------- $ 2daybiz Video Community portal"user-profile.php" SQL injection $ Author : Sangteamtham $ Home : Hcegroup.net $...

Holiday Travel Portal Upload Vulnerability

Exploit for php platform in category web applications ========================================== Holiday Travel Portal Upload Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ ...

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass

McAfee Email Gateway 6.7.1 - systemWebAdminConfig.do Remote Security Bypass source: https://www.securityfocus.com/bid/40255/info McAfee Email Gateway is prone to a security-bypass vulnerability because the web-based interface fails to properly perform user-profile checks. Attackers can exploit th...

Heaven Soft CMS 4.7 SQL Injection

x Tybe: SQL Injection Vulnerabilities x Vendor: http://www.newyorkindoorcricket.com/ x Script Name: Heaven Soft, CMS Version: 4.7 x author: PrinceofHacking x Team: Ashiyane Digital Security Team x Mail : PrincedotH4ck@gmaildotcom D0rk:"photogalleryshow.php?id" Exploit:...

Heaven Soft CMS 4.7 SQL Injection

------------------------------------------------------------------------------------------- Heaven Soft CMS v 4.7 photogalleryopen.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected]...

Heaven Soft CMS 4.7 - 'photogallery_open.php' SQL Injection

------------------------------------------------------------------------------------------- Heaven Soft CMS v 4.7 photogalleryopen.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected]...

Heaven Soft CMS v 4.7 photogallery_open.php SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================= Heaven Soft CMS v 4.7 photogalleryopen.php SQL Injection Vulnerability ========================================================================= Author: CoBRa21 Mail:...

List an Verify umask entries in /etc/profile and ~/.profile

This plugin uses SSH to list an verify umask entries in /etc/profile and /.profile. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

SQL Injection Vulnerabilitie in PhotoPost vBGallery 2.5

Product Imnformation -------------------- PhotoPost vBGallery is a popular commercial Image Gallery Add-on fr vBulletin which is being developed by All Enthusiasts, Inc. http://www.photopost.com Description ----------- PhotoPost vBGallery 2.5 allows the user to modify gallery settings for his...

CVE-2010-0669

MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors...

Facebook Vulnerable to Clickjacking Attacks

Facebook is susceptible to certain types of attacks that could allow someone to hijack an account while a user is interacting with another Web site, a security researcher warned on Monday. Reseacher Nitesh Dhanjani also said a design flaw in Facebook is granting third-party apps permission to...

CVE-2009-4567

Multiple cross-site scripting XSS vulnerabilities in editprofile.php in Viscacha 0.8 Gold allow remote authenticated users to inject arbitrary web script or HTML via the 1 skype, 2 yahoo, 3 aol, 4 msn, or 5 jabber parameter in a profile2 action. NOTE: some of these details are obtained from third...

Viscacha 0.8 Gold - Persistent Cross-Site Scripting

Viscacha 0.8 Gold persistant XSS vulnerability Found By: mrme Download: http://www.viscacha.org/ Tested On: Windows Vista Note: For educational purposes only POC Info: A regular user of the board can embed javascript code that could be executed within the context of the admin's browser. If the us...