Whistler Web Design Sql Injection Vulnerablity

Exploit for php platform in category web applications ============================================ Whistler Web Design Sql Injection Vulnerablity ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 2 .--. .-. .-. .-. .-.,---...

PHP Ticket System Beta 1 - 'index.php?p' SQL Injection

Exploit Title: PHP Ticket System Beta 1 'p' SQL Injection Date: 04/16/12 Author: G13 Twitter: @g13net Software Site: http://sourceforge.net/projects/phpticketsystem/ Version: Beta 1 Category: webapp php Description PHP Ticket System is a small PHP MySQL trouble ticket or work ordersystem that is ...

MiPagina - Blind SQLi / XSS Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

PlumeCMS 1.2.4 Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : PlumeCMS = 1.2.4 Multiple Persistent XSS Date : 04-04-2012 Author : Ivano Binetti http://www.ivanobinetti.com Software link :...

Simple PHP Agenda 2.2.8 - Cross-Site Request Forgery (Add Admin / Add Event)

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Simple PHP Agenda = 2.2.8 CSRF Add Admin - Add Event Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Software link :...

CMS Made Simple <= 1.10.3 XSS Vulnerability

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS Made Simple = 1.10.3 XSS Vulnerability Date : 02-04-2012 Author : Ivano Binetti...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

SyndeoCMS 3.0.01 - Persistent Cross-Site Scripting

+---------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : SyndeoCMS = 3.0.01 Persistent XSS Date : 29-03-2012 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.syndeocms.org/ Software...

online scheduling CSRF (change password)

Exploit for php platform in category web applications Exploit Title: online scheduling CSRF change password Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/online-scheduling-and-appointment-booking/23743/ Category:: webapps Demo :...

Webify Photo Gallery CSRF (add admin / change e-mail address)

Exploit for php platform in category web applications Exploit Title: Webify Photo Gallery CSRF add admin Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/webify-photo-gallery-free-php-photo-gallery/32382/ Category:: webapps Demo :...

Infoserve SQL Vulnerability

Exploit for php platform in category web applications ============================================================================================================= - Optimiz3r - | | | | |--..-----.| | |.---.-..----.| |--..-----..----..-----.| |.----..--------..--.--. | | | | || -|| || || || | -||...

glFusion CMS v1.2.2 Multiple Vulnerabilites

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

MangosWeb SQL Injection

EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev Team TESTED ON: W7 & Backtrack 5...

MangosWeb - SQL Injection

MangosWeb - SQL Injection EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev Team...

MangosWeb SQL Vulnerability

Exploit for php platform in category web applications EXPLOIT TITLE: MangosWeb SQL Vulnerability Author: BY Hood3dRob1n Greetz: 1337day Inj3ct0r Exploit DataBase 1337day.com AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DOR...

majalty (category.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: majalty category.php Blind SQL Injection Vulnerability Category: webapps Web Site: http://www.majalty.com/script.htm Version: 1.2 Date: 5-Nov-2011 Price: 84$ Author: TH3.ONE Contact: onehacker55atyahoodotcom Google dork:...

Oracle Hyperion Financial Management ActiveX Heap Overflow

Added: 11/21/2011 BID: 50565 OSVDB: 76913 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for...

Oracle Hyperion Financial Management ActiveX File Upload

Added: 11/15/2011 BID: 50476 Background Oracle Hyperion Financial Management is a web-based financial consolidation, reporting and analysis solution. Problem Hyperion Financial Management webapp installs an ActiveX control on the target system. This control is marked as safe for scripting and...

Call for Papers from DefCon Chennai (DC602028)

Call for Papers from DefCon Chennai DC602028 Background: We are the Official DEF-CON Chennai Group DC602028 The Event is taking place on 11th September 2011 at a resort in ECR Road Chennai,India. We will be having a Private conference room for the meet. Regarding Paper Submission We require...

docuFORM Mercury WebApp 6.16a/5.20 Multiple XSS Vulnerabilities

Exploit for php platform in category web applications docuFORM Mercury WebApp 6.16a Multiple Cross-Site Scripting Vulnerabilities function xss1document.forms"xss1".submit; function xss2document.forms"xss2".submit; alert1" / input type="hidd...