Diggersolutions Newsletter - Remote File Upload Vulnerabilities

Exploit for php platform in category web applications =============================================================== Diggersolutions Newsletter - Remote File Upload Vulnerabilities ===============================================================...

Easyreplicasrl - Remote SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== Easyreplicasrl - Remote SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Customer Paradigm <= (product.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Customer Paradigm Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0...

CubeCart 2.0.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================== CubeCart 2.0.1 SQL Injection Vulnerability ========================================== My + Author : XAviaTiqueX fr0m OS-TEAM Contact : email protected + Greats T0: YasMouh , M.K , ArGon HaCKer ,...

WebMage <= Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ WebMage Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout member from...

411cc - Multiple SQL Injections

411cc - Multiple SQL Injections =================================================================== 411CC e-Commerce = String' SQL Injection Vulnerabilities =================================================================== My + Author : KnocKout Contact : [email protected] Software info Web App...

WikiWebHelp 0.3.3 Insecure Cookie Handling

=============================================== WikiWebHelp v0.3.3 = Insecure Cookie Handling =============================================== My + Author : FuRty Contact : [email protected] Software info Web App. : WikiWebHelp Version : 0.3.3 Software: http://sourceforge.net/projects/wwh/ Vendor :...

Chipmunk Pwngame - Multiple SQL Injections

Chipmunk Pwngame - Multiple SQL Injections =================================================== Chipmunk Pwngame = Multiple SQL Vulnerabilities =================================================== My + Author : KnocKout Contact : [email protected] + Greatz : h4x0reSEC / Inj3ct0r Team / Exploit-DB...

xWeblog 2.2 SQL Injection

=================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software: http://www.aspdunyasi.com/goster.asp?id=1...

xWeblog v2.2 (oku.asp?makale_id) SQL Injection Vulnerability

No description provided by source. =================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software:...

Dalogin 2.2 Cross Site Scripting / File Disclosure / SQL Injection

dalogin 2.2 multiple vulnerabilites app desc: Configurable WebSite. PHP + Mysql: news zone with rss feed, private zone, languages, themes, administration panel app source: http://dalogin.sourceforge.net/ author: hc0 1 config file disclosure you can access config.ini file from...

Google Releases Web App Security Course

Google has released a new online training course for Web application developers designed to teach them how to avoid common programming mistakes that lead to vulnerabilities such as cross-site scripting, cross-site request forgery and others. The course, which is part of the company’s Google Code...

FCKEditor 2.0 RC3 Shell Upload

FCKEditor Shell Upload Exploit ------------------------------ Web-App: FCKEditor. Version: Version 2.0 RC3 Release Candidate 3. Link : http://sourceforge.net/projects/fckeditor/files/FCKeditor/ Author : Aodrulez. Email : [email protected] Vulnerable File : -----------------...

LineWeb Local File Inclusion / SQL Injection

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

Multiple vulnerabilities in LineWeb 1.0.5

LineWeb it's a web-app to manage Lineage 2 private severs, a very known mmorpg, and allows to do action such as: Main Features: - Register - Login - Quick Login Function - Quick statistics function server status, game server status, online players - Statistics login server status, game server...

An enterprise Web application upload vulnerability-vulnerability warning-the black bar safety net

Author: Dragon shadow VS hx dragons Looks like Is a very old program even in the Baidu and Google didn't find a program today next to the Note When or unintentionally found that the use of this program website google. the cn keyword inurl:zhaoshang. asp? bid search to 5 6 Article 3 of the results...

PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD

Exploit for unknown platform in category web applications ================================================= PHPOPENCHAT 3.0.2 Cross Site Scripting AND/OR FPD ================================================= The PoC: 1.- Preview This web APP is Vulnerable to xss in its instalation file but you ca...

html2ps 'include file' Server Side Include Directive Directory Traversal

Exploit for unknown platform in category web applications ======================================================================== html2ps 'include file' Server Side Include Directive Directory Traversal Vulnerability ========================================================================...

html2ps 1.0 beta5 File Disclosure

!/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data that you control the vuln requires that "ssi" in the @html2ps block in t...

Jeremiah Grossman on Web App Security, Secure Development and When Web Security Will Improve

Dennis Fisher talks with Jeremiah Grossman, CTO and founder of WhiteHat Security, about the company’s new Website Vulnerability Statistics report, why SQL injection is still such a problem and when Web application security may improve. Download Subscribe to the Digital Underground podcast on...