PHPOPENCHAT 3.0.2 - Cross-Site Scripting AND/OR FPD

The PoC: 1.- Preview This web APP is Vulnerable to xss in its instalation file but you can misconfigurate all the code with this bug also, you must see to understand... 2.- Vulnerable Code function databasesetup if isset$POST'formdata' $host = string $POST'DATABASEHOST'; $user = string...

PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD

No description provided by source. The PoC: 1.- Preview This web APP is Vulnerable to xss in its instalation file but you can misconfigurate all the code with this bug also, you must see to understand... 2.- Vulnerable Code function databasesetup if isset$POST'formdata' $host = string...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...

Digital Scribe 1.4.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Name Digital Scribe Vendor http://www.digital-scribe.org Versions Affected 1.4.1 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION II...

phpCollegeExchange 0.1.5c - Multiple SQL Injections

phpCollegeExchange 0.1.5c - Multiple SQL Injections phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact...

phpldapadmin Local File Inclusion

No description provided by source. PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server."...

phpLDAPadmin - Local File Inclusion

PHPLDAPADMIN LOCAL FILE INCLUSION author : ipsecs website : http://ipsecs.com Date : December, 10th, 2009 -i- Description "Phpldapadmin is web based LDAP client which provides easy, anywhere-accessible, multi-language administration for LDAP server." http://phpldapadmin.sourceforge.net vulnerable...

Shoutbox 1.0 - HTML / Cross-Site Scripting Injection

Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select your name and your text put this code '"alert'XSS skh'...

Shoutbox 1.0 Cross Site Scripting

Vulnerable Code in index.php : : Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit: site.com/Shoutbox/index.php in the select your name and your text put this code '"alert'XSS skh'...

Shoutbox 1.0 HTML / Xss Injection

No description provided by source. Vulnerable Code in index.php : pstrong?php echo $names$i; ?:/strong ?php echo $shouts$i; ?/p Shoutbox 1.0 HTML / Xss inejction exploit AuTh0r : SKuLL-HacKeR H0ME : Sec-Best & SaudiHack & S3curity-Art Email : [email protected] Vendor: http://www.plohni.com exploit:...

Endonesia 8.4 CMS Local File Inclusion

Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error Poc:http://www.site.com/mod.php?mod=/../../../../../../proc/self/environ%00...

eNdonesia CMS 8.4 - Local File Inclusion

eNdonesia CMS 8.4 - Local File Inclusion Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Oscailt 3.3 Local File Inclusion

0 Oscailt 3.3 CMS 0 Download: http://sourceforge.net/projects/oscailt/ 0 Bug: Local File Inclusion in index.php file ! 0 Author: [email protected] 0 Team: Fatal Error 0 Poc: http://www.site.com/index.php?objid=/../../../../../../../../../../proc/self/environ%00 0...

MundiMail 0.8.2 Remote Code Execution

No description provided by source. Reference: http://www.ccat.edu.mx/advisors/advisor5/advisor5.html Credits: Ccat Research Labs - México - Coatepec, Ver. www.ccat.edu.mx Software Link: http://sourceforge.net/projects/mundimail/ Tested on: Debian, Centos & Windows Server 2000 Preview: Code uses...

MundiMail 0.8.2 - Remote Code Execution

MundiMail 0.8.2 - Remote Code Execution Reference: http://www.ccat.edu.mx/advisors/advisor5/advisor5.html Credits: Ccat Research Labs - México - Coatepec, Ver. www.ccat.edu.mx Software Link: http://sourceforge.net/projects/mundimail/ Tested on: Debian, Centos & Windows Server 2000 Preview: Code...

MundiMail 0.8.2 - Remote Code Execution

Reference: http://www.ccat.edu.mx/advisors/advisor5/advisor5.html Credits: Ccat Research Labs - México - Coatepec, Ver. www.ccat.edu.mx Software Link: http://sourceforge.net/projects/mundimail/ Tested on: Debian, Centos & Windows Server 2000 Preview: Code uses System and Exec without good practic...

PHP-Nuke 8.0 SQL Injection / Remote Shell

==================================== PHP-Nuke Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com Product:...

Xstate Real Estate 1.0 - Blind SQL Injection Cross-Site Scripting

Xstate Real Estate 1.0 - Blind SQL Injection Cross-Site Scripting / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Xstate Real Estate 1.0 bSQL/XSS Multiples Vulnerability Discovered By :...

Danneo CMS 0.5.2 SQL Injection

======================================== Danneo CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...

TotalCalendar 2.4 (bSQL/LFI) Multiple Remote Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || TotalCalendar 2.4 bSQL/LFI Multiples Remote Vulnerability Discovered By : Moudi Contact : [email protected]...