VirtueMart 2.0.2 Information Disclosure

TITLE ....... VirtueMart 2.0.2 Information Disclosure DATE ........ 06.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://virtuemart.org VERSION ..... 2.0.2 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this? 2. What is t...

PHP Volunteer Management 1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities Date: 04/21/12 Author: G13 Twitter: @g13net Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Category: webapp php ToC 0x01 Description 0x02...

PHP Volunteer management 1.0.2 - Multiple Vulnerabilities

Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities Date: 04/21/12 Author: G13 Twitter: @g13net Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Category: webapp php ToC 0x01 Description 0x02 XSS 0x03 SQL Injection 0x04 Vendor Notification 0x01...

PHP Ticket System Beta 1 - 'index.php?p' SQL Injection

Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small PHP MySQL trouble ticket or work ordersystem that is ...

PHP Ticket System Beta 1 SQL Injection

Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small PHP MySQL trouble ticket or work ordersystem that is ...

Whistler Web Design Sql Injection Vulnerablity

Exploit for php platform in category web applications ============================================ Whistler Web Design Sql Injection Vulnerablity ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 2 .--. .-. .-. .-. .-.,---...

PHP Ticket System Beta 1 (index.php) SQL Injection

Exploit for php platform in category web applications Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small...

PHP Ticket System Beta 1 - index.php?p SQL Injection

PHP Ticket System Beta 1 - index.php?p SQL Injection Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small...

MiPagina - Blind SQLi / XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

PlumeCMS 1.2.4 Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Simple PHP Agenda 2.2.8 - Cross-Site Request Forgery (Add Admin / Add Event)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Simple PHP Agenda = 2.2.8 CSRF Add Admin - Add Event Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

CMS Made Simple <= 1.10.3 XSS Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple = 1.10.3 XSS Vulnerability Date : 02-04-2012 Author : Ivano Binetti...

SyndeoCMS 3.0.01 - Persistent Cross-Site Scripting

+---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS = 3.0.01 Persistent XSS Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.syndeocms.org/ Software...

Webify Photo Gallery CSRF (add admin / change e-mail address)

Exploit for php platform in category web applications Exploit Title: Webify Photo Gallery CSRF add admin Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/webify-photo-gallery-free-php-photo-gallery/32382/ Category:: webapps Demo :...

online scheduling CSRF (change password)

Exploit for php platform in category web applications Exploit Title: online scheduling CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/online-scheduling-and-appointment-booking/23743/ Category:: webapps Demo :...

Infoserve SQL Vulnerability

Exploit for php platform in category web applications ============================================================================================================= - Optimiz3r - | | | | |--..-----.| | |.---.-..----.| |--..-----..----..-----.| |.----..--------..--.--. | | | | || -|| || || || | -||...

glFusion CMS v1.2.2 Multiple Vulnerabilites

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MangosWeb SQL Injection

EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev Team TESTED ON: W7 & Backtrack 5...

MangosWeb - SQL Injection

MangosWeb - SQL Injection EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev Team...