Joomla! Component JE Auto 1.5 - d_itemid SQL Injection

Joomla! Component JE Auto 1.5 - ditemid SQL Injection Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Quiz 2.3 - SQL Injection

Exploit Title: Joomla! Component JE Quiz 2.3 - SQL Injection Google Dork: inurl:index.php?option=comjequizmanagement Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/je-quiz-component/ Dem...

Domains & Hostings Manager PRO 3.0 - entries Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Domains & Hostings Manager PRO v 3.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://endavi.com/ Software Buy: https://codecanyon.net/item/advanced-domains-and-hostings-pro-v3-multiuser/10368735 Demo:...

Viavi Real Estate - SQL Injection

Exploit Title: Viavi Real Estate - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/viavi-real-estate/11217313 Demo: http://viavilab.com/codecanyon/realestatedemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Explo...

Quadz School Management System 3.1 SQL Injection

Exploit Title: Quadz School Management System v3.1 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://awardcorporation.com/ Software Buy: https://codecanyon.net/item/quadz-school-management-system/10452009 Demo: http://mass.awardcorporation.com/ Version: 3.1 Tested on: Win7...

Viavi Product Review SQL Injection

Exploit Title: Viavi Product Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/product-review/12406163 Demo: http://viavilab.com/codecanyon/productreviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

Microsoft SQL Server Clr Stored Procedure Payload Execution

This module executes an arbitrary native payload on a Microsoft SQL server by loading a custom SQL CLR Assembly into the target SQL installation, and calling it directly with a base64-encoded payload. The module requires working credentials in order to connect directly to the MSSQL Server. This...

QWIKIA 1.1.1 - SQL Injection

QWIKIA 1.1.1 - SQL Injection Exploit Title: QWIKIA - Ask And Answer Platform 1.1.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://xandr.co/ Software Buy: http://xandr.co/portfolio/qwikia Demo: http://qwikia.xandr.co/ Version: 1.1.1 Tested on: Win7 x64, Kali Linux x64...

QWIKIA 1.1.1 - SQL Injection

Exploit Title: QWIKIA - Ask And Answer Platform 1.1.1 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://xandr.co/ Software Buy: http://xandr.co/portfolio/qwikia Demo: http://qwikia.xandr.co/ Version: 1.1.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Multilanguage Estate Agency Pro 1.2 - SQL Injection

Multilanguage Estate Agency Pro 1.2 - SQL Injection Exploit Title: Multilanguage Estate Agency Pro 1.2 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://djrust26.hu/ Software Buy: https://codecanyon.net/item/multilanguage-estate-agency-pro-12/14521069 Demo:...

Youtube Analytics Multi Channel 3.0 SQL Injection

Exploit Title: Youtube Analytics Multi Channel v3.0 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://vtcreators.com/ Software Buy: https://codecanyon.net/item/youtube-analytics-multi-channel/14720919 Demo: http://demo.vtcreators.com/yamc/ Version: 3.0 Tested on: Win7 x64,...

CodePaul ClipMass - SQL Injection

Exploit Title: CodePaul ClipMass - Video Portal Site - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/codepaul-clipmass-video-portal-site/14681505 Demo: http://codepaul.com/clipmass/ Version: N/A Tested on: Win7 x64,...

Examplo Online Exam System SQL Injection

Exploit Title: Examplo - Online Exam System - SQL Injection Google Dork: N/A Date: 09.02.2017 Vendor Homepage: http://softpae.sk/ Software Buy: https://codecanyon.net/item/examplo-online-exam-system/16174658 Demo: http://munka.softpae.sk/examplo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

FTP Made Easy PRO 1.2 Arbitrary File Download

Exploit Title: FTP Made Easy PRO Script v1.2 - Arbitrary File Download Google Dork: N/A Date: 07.02.2017 Vendor Homepage: http://nelliwinne.net/ Software Buy: https://codecanyon.net/item/ftp-made-easy-pro-php-multiple-ftp-manager-client-with-code-editor/17460747 Demo:...

Ultimate Viral Media Script 1.0 - id SQL Injection

Ultimate Viral Media Script 1.0 - id SQL Injection Exploit Title: Flippy eXtremeViral – Ultimate Viral Media Script v1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

ThisIsWhyImBroke Clone Script 4.0.0 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippy AffilatePlatform – ThisIsWhyImBroke Clone Script v4.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

Funny Image and Video Script 2.0.0 - 'id' SQL Injection

Exploit Title: Flippy ChillOut – Funny Image and Video Script v2.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-chillout-funny-image-and-video-script/ Demo: http://chillout.flippydemos.com/...

Clone Script Directory Script 1.1.0 - 'cid' SQL Injection

Exploit Title: Flippy ScriptZone – Clone Script Directory Script v1.1.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-scriptzone-clone-script-directory-script/ Demo:...

Alstrasoft EPay Enterprise 5.17 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Alstrasoft EPay Enterprise v5.17 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/epayenterprise.htm Demo: http://blizsoft.com/enterpris...

Alstrasoft Forum Pay Per Post Exchange Script 2.01 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AlstraSoft Forum Pay Per Post Exchange v2.01 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/forum-pay-per-post-exchange.htm Demo:...