iScripts EasyCreate 3.2 - siteid SQL Injection

iScripts EasyCreate 3.2 - siteid SQL Injection Exploit Title: iScripts EasyCreate v3.2 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.iscripts.com/ Software Buy: http://www.iscripts.com/easycreate/ Demo: http://www.demo.iscripts.com/easycreate/demo// Version:...

Alstrasoft EPay Enterprise 5.17 - SQL Injection

Alstrasoft EPay Enterprise 5.17 - SQL Injection Exploit Title: Alstrasoft EPay Enterprise v5.17 Script - SQL Injection Google Dork: N/A Date: 04.02.2017 Vendor Homepage: http://www.alstrasoft.com/ Software Buy: http://www.alstrasoft.com/epayenterprise.htm Demo: http://blizsoft.com/enterprise/...

Itech Movie Portal Script 7.37 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Movie Portal Script v7.37 - SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/movie-portal-script/ Demo: http://movie-portal.itechscripts.com...

Itech Inventory Management Software 3.77 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Inventory Management Software v3.77 - SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://www.itechscripts.com/inventory-management-software/ Demo:...

Itech News Portal Script 6.28 - 'sc' SQL Injection

Exploit Title: Itech News Portal Script v6.28 - 'sc' Parameter SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/news-portal-script/ Demo: http://news-portal.itechscripts.com/ Version: 6.28 Tested on: Win7 x64, Kali Lin...

Itech Travel Portal Script 9.35 - SQL Injection

Itech Travel Portal Script 9.35 - SQL Injection Exploit Title: Itech Travel Portal Script v9.35 - SQL Injection Google Dork: N/A Date: 02.02.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://www.itechscripts.com/travel-portal-script/ Demo: http://travel.itechscripts.com/ Version...

shopify-scripts: Denial of service (segfault) due to null pointer dereference in mrb_obj_instance_eval

Introduction ============ Provided PoC segfaults at mrbobjinstanceeval due to null pointer dereference. Proof of concept ================ Attached the poc. Crash report ============ ./sandbox eval.rb ./sandbox:20: BUG Segmentation fault at 0x00000000000003 ruby 2.3.1p112 2016-04-26 x8664-linux-gn...

PHP Product Designer Script Arbitrary File Upload

Exploit Title: PHP Product Designer Script - Arbitrary File Upload Google Dork: N/A Date: 30.01.2017 Vendor Homepage: https://codecanyon.net/item/php-product-designer/19334412 Software Buy: https://codecanyon.net/item/php-product-designer/19334412 Demo:...

Itech Video Sharing Script 4.94 - SQL Injection

Itech Video Sharing Script 4.94 - SQL Injection Exploit Title: Video Sharing Script 4.94 - 'uid' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/video-sharing-script/ Demo:...

Itech Real Estate Script 3.12 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Itech Real Estate Script v3.12 - 'id' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/real-estate-script/ Demo:...

Itech Real Estate Script 3.12 SQL Injection

Exploit Title: Itech Real Estate Script v3.12 - 'id' Parameter SQL Injection Google Dork: N/A Date: 30.01.2017 Vendor Homepage: http://itechscripts.com/ Software Buy: http://itechscripts.com/real-estate-script/ Demo: http://real-estate.itechscripts.com Version: 3.12 Tested on: Win7 x64, Kali Linu...

Web Based TimeSheet Script SQL Injection

Exploit Title: Web Based TimeSheet Script - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://qualitypointtech.net/ Software Buy: http://www.qualitypointtech.com/webtimesheet/ Demo: http://qualitypointtech.net/timesheetdemo/index.php Version: N/A Tested on: Win7 x64,...

KB Messages PHP Script 1.0 - Authentication Bypass

KB Messages PHP Script 1.0 - Authentication Bypass Exploit Title: KB Messages PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbmessages.rar Demo:...

Haraka SMTP Command Injection

The Haraka SMTP server comes with a plugin for processing attachments. Versions before 2.8.9 can be vulnerable to command injection Module Options msf use exploit/linux/smtp/haraka msf undefinedharaka show actions ...actions... msf undefinedharaka set ACTION msf undefinedharaka show options ...sh...

KB Affiliate Referral Script 1.0 - Authentication Bypass

KB Affiliate Referral Script 1.0 - Authentication Bypass Exploit Title: KB Affiliate Referral PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbaffiliate.rar Demo:...

KB Messages PHP Script 1.0 - Authentication Bypass

Exploit Title: KB Messages PHP Script V1.0 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kbmessages.rar Demo: http://phpscripts.kunals.com/d/item/detail/messages/demo/ Version: 1.0 Tested...

KB Login Authentication Script 1.1 - Authentication Bypass

Exploit Title: KB Login Authentication Script V1.1 - Authentication Bypass Google Dork: N/A Date: 26.01.2017 Vendor Homepage: http://kunals.com/ Software Download: http://phpscripts.kunals.com/d/item/files/kblogin.rar Demo: http://phpscripts.kunals.com/d/item/detail/login/demo/ Version: 1.1 Teste...

Mini CMS 1.1 SQL Injection

Exploit Title: IC-Mini CMS Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/minicms.htm Demo: http://www.icloudcenter.net/demos/minicms/ Version: 1.1 Tested on: Win7 x64 Exploit Author: Ihsan...

ICTutors Tutoring Site Script 1.1 SQL Injection

Exploit Title: ICTutors-Tutoring Site Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/tutoring-site-script.htm Demo: http://www.icloudcenter.net/demos/ictutors/ Version: 1.1 Tested on: Win7 x6...

Mini Blog 1.1 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: IC-Mini Blog Script - Authentication Bypass Google Dork: N/A Date: 20.01.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Buy: http://www.icloudcenter.com/miniblog.htm Demo: http://www.icloudcenter.net/demos/miniblog/...