SEO Ecommerce(Shopping)<= XSRF/CSRF Vulnerabilities

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...

Pligg CMS 1.1.4 - SQL Injection

Pligg CMS 1.1.4 - SQL Injection Exploit Title: Pligg = 1.1.4 SQL injection Date: 03/23/2011 Author: Null-0x00 Software Link: http://pligg.com/ Version: = 1.1.4 Websites: zenk-security.com & hackerzvoice.net Description An SQL Injection has been found on /rsssearch.php in pligg CMS 1.1.4. Prior...

mygamingladder MGL Combo System <= 7.5 game.php SQL injection Exploit

Exploit for php platform in category web applications ===================================================================== mygamingladder MGL Combo System = 7.5 game.php SQL injection Exploit =====================================================================...

Microsoft Internet Explorer - Unsafe Scripting Misconfiguration (Metasploit)

$Id: ieunsafescripting.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

xt:Commerce Gambio 2008 < 2010 - 'reviews.php' Error-Based SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: xt:Commerce Gambio 2008 - 2010 ERROR Based SQL Injection "reviews.php" Date: 2010-09-18 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site : swissfaking.net/board Software Link: http://www.gambio.de/ Version: 2006 - 2008...

Joomla! Component eventCal 1.6.4 - Blind SQL Injection

Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download App:http://joomlacode.org/gf/project/eventcal/frs/ ==========ExPl0iT3d by RoAdKiLlEr========== +Description: eventCal is a calendar component for Joomla!. It enables you to...

Ecomat CMS - SQL Injection

Vulnerability ID: HTB22390 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinecomatcms.html Product: Ecomat CMS Vendor: Codefabrik GmbH Vulnerable Version: 5.0 and Probably Prior Versions Vendor Notification: 18 May 2010 Vulnerability Type: SQL Injection Status: Not Fixed,...

Eyeland Studio Inc. - SQL Injection

Eyeland Studio Inc. - SQL Injection Title: Eyeland Studio Inc. SQL Injection Vulnerability Version: 2.0 Author: Mr.P3rfekT Software Site:http://www.eyeland.com/ Tested on Lunix CVE : N/A Home :www.realmadridsy.com & www.v4-team.com/cc Founded By Mr.P3rfekT Dork :"Eyeland Studio Inc. All Rights...

LDAP Injection Proof Of Concept

Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...

LDAP - Injection

LDAP - Injection + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano,...

LDAP Injection Vulnerability

Exploit for unknown platform in category local exploits ============================ LDAP Injection Vulnerability ============================ + Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact :...

LDAP - Injection

Vurnerebility: LDAP Injection + Category : Implemented Web exploit + Category : Attack Technique + Author : mc2s3lector + dork : X/o" + Contact : www.yogyacarderlink.web.id + date : 4-2-10 + biGthank to : Allah SWT,jasakom,KeDai Computerworks,0n3-d4y n3ro,eplaciano, all.indonesian like a coding,...

Smart PHP Statistics 1.0 suffer from XSS Vulnerability

No description provided by source. view source print? ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: suffer from XSS Vulnerability ? Vendor: www.smartphpstatistics.com ? ? Software : Smart PHP Statistics 1.0 ? - ? - author: R3d-D3v!L ? TEAM: ArAB!AN...

Ultimate Fade-in Slideshow 1.51 - Arbitrary File Upload

================== NaMe: Ultimate Fade-in slideshow 1.51 = Shell Upload Vulnerability Author : NeX HaCkeR Contact: [email protected] ================== Script site : http://www.dynamicdrive.com ================== ExplOiT: 1: register in site http://www.xxx.com/path/userregister.php 2: go to your Ad...

JNM Guestbook 3.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43697/info JNM Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting

Lussumo Vanilla 1.1.51.1.7 - updatecheck.php Cross-Site Scripting source: https://www.securityfocus.com/bid/35124/info Vanilla is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

Nokia N95-8 browser - 'setAttributeNode' Method Crash

Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more tools, for example:...

dieseljobsite-sql.txt

Diesel Job Site Blind Sql Injection P0c Author : Stack Home Script : http://www.dieselscripts.com Desc : look the select Job Viewed: in real id+and+1=1 true the times change each time but in real id+and+1=0 false it remains stable go to url exploit or poc 2 or 3 times for see the difference betwe...

efestechvideo-sql.txt

$Author : RMx $Mail : [email protected] $Homepage : Coderx.org $Script name :Efestech video v5.0 $Script download :http://www.aspindir.com/goster/4835 $Script Sales : Free $Thanks : Ex-47 , TRIP $Vulnerable file : Default.asp $Vulnerable code : id parameters cannot filter... $Exploit :...

Tellmatic tm_includepath远程文件包含漏洞

Tellmatic是一款基于PHP的WEB应用程序。 Tellmatic不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于脚本对用户提交的'tmincludepath'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Tellmatic Tellmatic 1.0.7 Tellmatic Tellmatic 1.0.7.1 目前没有详细解决方案提供： http://www.tellmatic.org/...