CNIL CookieViz Cross Site Scripting / SQL Injection Vulnerabilities

CNIL CookieViz suffers from cross site scripting and remote SQL injection vulnerabilities. CNIL CookieViz XSS + SQL injection leading to user pwnage Product link: https://github.com/LaboCNIL/CookieViz CVE references CVE-2014-8351, CVE-2014-8352 TL;DR ----- Since October 2014, the French National...

Pagekit 0.8.7 Cross Site Scripting / Open Redirect Vulnerabilities

Pagekit version 0.8.7 suffers from cross site scripting and open redirect vulnerabilities. Exploit Title: Pagekit 0.8.7 Multiple Vulnerabilities Date: 13-10-2014 Remote: Yes Exploit Author: Mahendra Vendor Homepage: http://www.pagekit.com/ Version: 0.8.7 Tested on: Windows XP SP 3 with WAMP Serve...

ULoki Community Forum 2.1 - (usercp.php) XSS Vulnerability

No description provided by source. Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' ...

Uiga Fan Club SQL Injection Vulnerability

No description provided by source. Exploit Title: Uiga Fan Club SQL Injection Vulnerability Date: 22/03/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net/products/ufc.html Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip Version: N/A Tested on: Win Wamp CVE : N...

Uiga Business Portal SQL/ XSS Vulnerability

No description provided by source. Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Serv...

[bWAPP] an extremely buggy web application!

bWAPP, or a buggy web application, is a deliberately insecure web application. bWAPP helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities. bWAPP prepares to conduct successful penetration testing and ethical hacking projects. What makes bWAPP so uniqu...

DoliWamp 'jqueryFileTree.php' Traversal Gather Credentials

This module will extract user credentials from DoliWamp - a WAMP packaged installer distribution for Dolibarr ERP on Windows - versions 3.3.0 to 3.4.2 by hijacking a user's session. DoliWamp stores session tokens in filenames in the 'tmp' directory. A directory traversal vulnerability in...

Puzzle Apps CMS 3.2 Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

Puzzle Apps CMS 3.2 - Local File Inclusion

------------------------------------------------------------------------ Software................ Puzzle Apps CMS 3.2 Vulnerability........... Local File Inclusion Site.................... http://www.puzzleapps.org/ Download Link...

Wamp Webserver 2.1 File Download

!/usr/bin/perl In The name of Allah Title : WampServer 2.1 Remote File Download Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Content/Download File Tested on : Windows XP S...

File Thingie 2.5.5 - File Security Bypass

File Thingie 2.5.5 - File Security Bypass Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website: http://www.redteamsecure.com/labs Date: 5/15/2010 Application: File Thingie Version: 2.5.5 Link: http://www.solitude.dk/filethingie/download Description:...

File Thingie v2.5.5 File Security Bypass

Exploit for php platform in category web applications ======================================== File Thingie v2.5.5 File Security Bypass ======================================== Title: File Thingie v2.5.5 File Security Bypass Author: Jeremiah Talamantes RedTeam Security Website:...

ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting

ULoki Community Forum 2.1 - usercp.php Cross-Site Scripting Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : ...

ULoki Community Forum v2.1 (usercp.php) XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= ULoki Community Forum v2.1 usercp.php XSS Vulnerability ========================================================= Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site...

Uiga Business Portal Cross Site Scripting / SQL Injection

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

Uiga Business Portal - SQL Injection Cross-Site Scripting

Uiga Business Portal - SQL Injection Cross-Site Scripting Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linu...

Uiga Business Portal SQL/ XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Uiga Business Portal SQL/ XSS Vulnerability =========================================== Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site :...

Uiga Business Portal - SQL Injection / Cross-Site Scripting

Exploit Title: Uiga Business Portal SQL/ XSS Vulnerability Date: 8/2/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net Software Link: http://www.scriptdevelopers.net/download/uigapersonalportal.zip Version: N/A Tested on: Linux OS = Cent OS 5.4 Server = Apache/2.2.3 SQLDB = MYSQL...

LightOpen CMS Remote File Inclusion (smarty.php)

Exploit for unknown platform in category web applications ================================================ LightOpen CMS Remote File Inclusion smarty.php ================================================ Exploit Title: LightOpen CMS Remote File Inclusion smarty.php Date: 2010-01-05 Author: Zer0...