Nwahy Articles v2.2 CSRF Add Admin

Exploit for php platform in category web applications Exploit Title: Nwahy Articles V2.2 CSRF Add Admin Author: DaOne Category: webapps Software Link: http://www.nwahy.com/upload/article-v2.2.rar Google dork: intext:"Powered by Nwahy Articles V2.2" Exploit 0day.today 2018-03-19...

AVA VoIP - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/54591/info AVA VoIP is prone to multiple security vulnerabilities because the application fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context o...

[SECURITY] Fedora 16 Update: php-ZendFramework-1.11.12-1.fc16

Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile code base. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and...

AyMSite CMS 3.0.2 SQL Injection

Exploit Title: AyMSite V 3.0.2 sqli Vendor: http://www.aymsoft.com/ Date: 08/06/2012 Author: xDarkSton3x Dork: inurl:aymindex.php?option= E-mail : [email protected] Category: webapps Example Sites : http://www.satena.gov.co/aymindex.php?option=ciudadano&pagcatid=3&pagid=%27...

Web ellasan Design - SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Web ellasan Design SQL injection Vulnerability Author: Becax Home : CrimeIRCD ---------------------------------------------------------------------! Email : email protected Category: webapps Version: n/a Google dork: "powered by...

Chevereto Upload Script Cross Site Scripting / User Enumeration

Exploit for php platform in category web applications ======================================================================================== Vulnerable Software: Chevereto upload script Downloaded from: http://code.google.com/p/chevereto/downloads/list...

'The Hackers Conference 2012' to be held in New Delhi

'The Hackers Conference 2012' to be held in New Delhi The Biggest Hacking Mania has arrived. The Hackers Conference 2012 will be held in New Delhi on July 29. THC 2012 is expected to be the first open gathering of Blackhat hackers in India who will debate latest security issues with the top...

exponentcms 2.0.5 - Multiple Vulnerabilities

Information -------------------- Name : XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Software : ExponentCMS 2.0.5 and possibly below. Vendor Homepage : http://www.exponentcms.org Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Onur Yılmaz...

A simple file extension authentication bypass techniques-vulnerability warning-the black bar safety net

Mining the web application 0day the most effective and most direct way is directly from the file operation function to start with, my personal preference first took a fancy to pass the class code, The this article to a simple tips. Of course skill is not entirely original, is by learning someone...

Cross-site scripting vulnerability in Invision Power Board version 3.2.3

Information -------------------- Name : Cross-site scripting vulnerability in Invision Power Board version 3.2.3 Software : Invision Power Board version 3.2.3 Vendor Homepage : http://www.invisionpower.com Vulnerability Type : Cross-site scripting Severity : High Researcher : Vasil A. [email protected]...

Animus Twitter Tool CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Animus Twitter Tool CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/animus-twitter-tool/29367/ Category:: webapps Demo : http://www.animusprogramming.com/anitwtr/anitwtr.php Greetz: Inj3ct0r...

FAQ module for phpFaber CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: FAQ module for phpFaber CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/faq-module-for-phpfaber-cms/19826/ Category:: webapps Demo : http://demo.phpfaber.com/cms1/cmsadmin Greetz: Inj3ct0r Explo...

Knowledge Base Builder CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Knowledge Base Builder CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/knowledge-base-builder-by-stivasoft/31827/ Category:: webapps Demo : http://www.phpjabbers.com/demo/kbb10/ Greetz: Inj3ct0r...

SEO PHP Directory Software CSRF

Exploit for php platform in category web applications Exploit Title: SEO PHP Directory Software CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/php-directory-software-seo/32316/ Category:: webapps Demo : http://demos1.softbiz.com/scripts/seodirectory/admin/ Greet...

ManageEngine DeviceExpert 5.6 Java Server Directory Traversal

Exploit for jsp platform in category web applications ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet Unauthenticated Remote Directory Traversal Database Backup / auth-conf.xml Disclosure Exploit product homepage: http://www.manageengine.com/products/device-expert/ file...

PHP Gift Registry 1.5.5 SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

Advanced POWER PACKED Freelancers CSRF

Exploit for php platform in category web applications Exploit Title: Advanced POWER PACKED Freelancers CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/advanced-power-packed-freelancers-script-php/22749/ Category:: webapps Demo :...

Invision Power Board 3.2.3 Cross Site Scripting

Name : Cross-site scripting vulnerability in Invision Power Board version 3.2.3 Software : Invision Power Board version 3.2.3 Vendor Homepage : http://www.invisionpower.com Vulnerability Type : Cross-site scripting Researcher : Vasil A. [email protected] Description -------------------- Invision Power...

Softbiz Quick Ad Manager CSRF

Exploit for php platform in category web applications Exploit Title: Softbiz Quick Ad Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/softbiz-quick-ad-manager/32339/ Category:: webapps Demo : http://www.softbizscripts.com/scripts/ba/admin/ Greetz: Inj3ct0...

Barracuda CSRF (change e-mail address)

Exploit for php platform in category web applications Exploit Title: Barracuda CSRF change e-mail address Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/barracuda/19576/ Category:: webapps Demo : http://demo.boonex.com/administration/ Greetz: Inj3ct0r Exploit DataBas...