WordPress NextGEN Gallery 2.0.63 Shell Upload

Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress Version: 2.0.63 and less --------------------------------------------------- Vulnerability Tracking...

ASPSiteware Recipe Organizer SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Recipe Organizer SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

ASPSiteware Contact Directory 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Contact Directory SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:40$ Contact: [email protected] Website: www.1337db.com Greetings to:...

T-Dreams Cars Ads Package 2.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: T-Dreams Cars Ads Package SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link:http://t-dreams.com Category:WebApp Version:2.0 Price:31$ Contact: [email protected] Website: www.1337db.com Greetings to:...

MangosWeb SQL Injection Vulnerability

No description provided by source. EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev...

Web-APP.Org WebAPP 0.8/0.9.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retrieve arbitrary,...

WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (1st)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...

SmarterMail Enterprise and Standard <=11.x - Stored XSS

No description provided by source. ?php / Exploit Title: SmarterMail Enterprise and Standard =11.x Stored XSS Google Dork: intext:SmarterTools Inc. inurl:login.aspx Date: 15 Jan 2014 Exploit Author: Saeed reza Zamanian s.zamanian AT imenantivirus.com Vendor Homepage: http://www.smartertools.com/...

T-dreams Announcement Script SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: T-dreams Announcement Script SQL injection Vulnerable Date: 21-08-2010 Author: Br0wn Sug4r Software Link: http://www.t-dreams.com/download/announce.zip Version: n/a Tested on...

ASPSiteware JobPost 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware JobPost SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:40$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com,...

plx Ad Trader 3.2 Authentication Bypass Vulnerability

No description provided by source. Vendor or Software Link: http://www.plxwebdev.com/script/adtrader/ Category:WebApp Version: 3.2 Price: 60 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Yo...

Gentoo Webapp-Config 1.10 Insecure File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13780/info Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it. An...

LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...

Yes Solutions - Webapp SQL Injection

No description provided by source. .:. Author : HackXBack [email protected] Lebanese Hacker .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : YES SOLUTIONS http://www.yessolutions.biz/files/index.php .:. Bug Type : Sql Injection .:. Dork : Powered by: Yes Solutions === Exploit ==...

jetty 6.x - 7.x xss, information disclosure, injection

No description provided by source. Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

Joomla Component com_zina SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component comzina SQL Injection Vulnerability Date: 21-08-2010 Author: Th3 RDX Software Link:http://www.pancake.org/zina/ Version: 2.x Tested on: Demo Site category: webapp Code : n/a...

WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (2nd updated)

No description provided by source. ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi...

Setiran CMS Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Setiran CMS Blind SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a...

Pulse Pro 1.4.3 Persistent XSS Vulnerability

No description provided by source. Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability Date: 24-10-2010 Author: Th3 RDX Software Link: http://pulsecms.com/ Version: 1.4.3 Tested on: Demo Site category: webapp Code : n/a...

Ecommercemax Solutions Digital Goods Seller SQL Injection

No description provided by source. Author: R4dc0re Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://www.ecommercemax.com/ Category:WebApp Version:1.5 Price:60$ Contact: [email protected] Website: www.1337db.com...