Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Drive-By Downloads Still Running Wild

For some time now, the browser has been the most dangerous piece of software on the Web, and to hear researchers tell it, the climate it likely to get far worse before it gets any better. The attack landscape has shifted in a lot of important ways in the last few years, but none of the changes ha...

Penetration Tester XSSer v1.0 - New Version Download

All of you web application penetration testers, check out this release of XSSer version 1.0! From this release, the author plans to rename XSSer to "The Mosquito". Our first post regarding XSSer can be found here. "XSSer is an open source penetration testing tool that automates the process of...

Joomla Forms Local File Inclusion / Download

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Joomla Component comforms Multiple Vulnerabilities Date: 7-11-2010 Author: Th3 RDX Software Link: n/a Version: n/a Tested on: online Sites category: webapp/Joomla Code : n/a Google Dork :...

CommonSense CMS Sql Injection Vulnerability

Exploit Title: CommonSense CMS Sql Injection Vulnerability --- Platform / Tested on: Win/Linux --- category: webapps/0day --- Code : https://site/article.php?articleid=SQL --- Dork : "Powered by CommonSense CMS" --- Found this article interesting? Follow us on Twitter  and LinkedIn to read more...

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability (CVE-2010-2750)

VUPEN Security Research - Microsoft Office Word Document Array Indexing Vulnerability CVE-2010-2750 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- Microsoft Office Word, included in the Microsoft Office suite, is a powerful authoring program that gives the ability t...

Site2Nite Auto E-Manager SQL Injection

================================================== Auto e-Manager = SQL Injection Vulnerability ================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB H4X0RE SECURITY PROJECT Software info Web App. :...

TradeMC E-Ticaret - SQL Injection / Cross-Site Scripting

=================================================== TradeMC E-Ticaret - SQLi/XSS Multiple Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Special Thanks : H4x0re Security 2010, inj3ct0r team Software info Web App. : TradeMC...

PixelPost 1.7.3 Cross Site Request Forgery / Cross Site Scripting

1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinXp sp3 1 1 +Risk :Hight 0 0...

Micronetsoft RV Dealer Website - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Micronetsoft RV Dealer Website SQLi Vulnerability Vendor url:http://www.micronetsoft.com Version:1 Price:199$ Published: 2010-09-06 GThanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, M4n0j,NoCare,...

iGaming CMS - Multiple SQL Injections

iGaming CMS - Multiple SQL Injections Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hi...

Play! Framework 1.0.3.1 Directory Traversal

Exploit Title: Play! Framework = 1.0.3.1 Directory Transversal Vulnerability Date: July 24, 2010 Author: kripthor Software Link: http://www.playframework.org/ Version: Play! Framework = 1.0.3.1 Tested on: Ubuntu 10 CVE : N/A Notes: 28/07/2010 at 14:03 - Developer contacted 28/07/2010 at 15:04 - F...

Tycoon Record Script 1.0.9 SQL Injection

% TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | Exploit---------------------------------- 0x1: Goto...

PunBB 1.3.4 Pun_PM 1.2.6 - Blind SQL Injection

PunBB 1.3.4 PunPM 1.2.6 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subjec...

How Mass SQL Injection Attacks Became an Epidemic

In the first few months of 2009, security researchers began seeing signs of a new piece of malware that was somewhat baffling to them. It didn’t act like other Trojans or rootkits and try to bury itself on an infected machine and try to do nasty stuff like deleting registry keys or copying the...

Absolute Shopping cart (company.asp) sql Injection Vulnerability

Exploit for asp platform in category web applications ================================================================ Absolute Shopping cart company.asp sql Injection Vulnerability ================================================================ Exploit Title: Absolute Shopping cartcompany.asp s...

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities

VUPEN Security Research - Winamp Player FLV Data Processing Multiple Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Winamp is a proprietary media player for Windows-based PCs, written by Nullsoft, now a subsidiary of AOL. It is...

Campsite CMS 3.4.0 Cross Site Request Forgery

Date: Mon 12 Jul 2010 03:40:46 PM EEST Vendor: http://www.sourcefabric.org/en/home/web/6/Campsite.htm?tpl=18 Download: http://sourceforge.net/projects/campsite/files/campsite/3.4.0/campsite-3.4.0.tar.gz/download --- -= CSRF PoC 1 - Create Admin User =- Campsite CMS 3.4.0 Multiple CSRF...

ClanTiger Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications ======================================= ClanTiger Multiple CSRF Vulnerabilities ======================================= Exploit Title: ClanTiger 1.3 Multiple CSRF, delete user, shoutbox items, news, ??? ban/unban user, delete forum etc. Date: ...

MooreAdvice (productlist.asp) SQL injection Vulnerable

Exploit for asp platform in category web applications ========================================================= MooreAdvice productlist.asp SQL Injection Vulnerability ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...