xClassified 1.2 SQL Injection

Application Name : Artifectx XClassified Script Vulnerable Type : SQL Injection Infection : Yönetici ve User bilgileri çalýnabilir Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://xclassified.artifectx.com/demo/ads.php?catid=4...

Thickbox Gallery 2.0 - (admins.php) Admin Data Disclosure Vulnerability

No description provided by source. + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted...

EZGenerator跨站请求伪造漏洞

EZGenerator是一个网站建设和内容管理系统。 The application allows users to perform certain actions via HTTP requests without performing proper validity checks to verify the requests. This can be exploited to e.g. create an administrative account when a logged-in administrative user visits a specially crafted web...

EZGenerator Cross Site Request Forgery / File Disclosure

EZGenerator – Local File Disclosure/Admin Data/CSRF Vulnerability ================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Dork : inurl:”utils.php?action=...

WHMCS 5.2.8 SQL Injection Vulnerability (0day)

dork:- inurl:submitticket.php site:.com inurl:submitticket.php site:.net inurl:submitticket.php site:.us inurl:submitticket.php site:.eu inurl:submitticket.php site:.org inurl:submitticket.php site:.uk intext:"Powered by WHMCompleteSolution" intext:"Powered by WHMCompleteSolution"...

MotoCMS - 'admin/data/users.xml' Access Restriction / Information Disclosure

source: https://www.securityfocus.com/bid/57055/info MotoCMS is prone to a file-disclosure and an arbitrary file-upload vulnerability. An attacker can exploit these issues to upload a file and view local files in the context of the web server process, which may aid in further attacks. MotoCMS 1.3...

am4ss Support System 1.2 - PHP Code Injection

am4ss Support System 1.2 - PHP Code Injection 10/2011 , Vulnerability discovered till now , i haven't reported the vendor , why!!! The idiot backdoored it by himself + the official site is fucked up ; 19/07/2012 , Public Disclosured C:\labphp am4ss.php localhost /lab/am4ss/...

PTCPay GEN4 SQL Injection

===================================================== PTCPay GEN4 buyupg.php SQL Injection Vulnerability ===================================================== Exploit Title: Date: 28.06.2010 Author: Dark.Man [email protected] Thanks To: Diq3N , SkyTurk , ByHuCRe , HeuRiSTiC , th3spy , 3KStyL3 ...

xyxcms v1. 3 search injection vulnerability-vulnerability warning-the black bar safety net

Search Page Code filtering is not strict, resulting in the search string-type the injection s. asp from this code can be seen in the search string injection k=request. QueryString"k" page=request. QueryString"page" if page="" or isnumericpage=0 then gcurpage=1 else gcurpage=cintpage end if...

Gravity Board X v2.0 BETA (Public Release 3) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Gravity Board X v2.0 BETA Public Release 3 SQL Injection Vulnerability ======================================================================== !/usr/bin/perl Exploit...

TermiSBloG 1.0 SQL Injection

TermiSBloG V 1.0 SQL Injections Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : D3xer and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : TermiSBloG V 1.0 SQL Injection Bug Type : SQL Infection : Adminin bilgileri alinabilir. Dork : "© 2008 DevWorx - devworx.somee.com"...

ABC Advertise 1.0 Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

ABC Advertise 1.0 Admin Password Disclosure Vulnerability

No description provided by source. homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username...

ABC Advertise 1.0 - Admin Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

ABC Advertise 1.0 - Admin Password Disclosure

ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...

Bandwebsite 1.5 - SQL Injection / Cross-Site Scripting

Bandwebsite Version 1.5 Sql & XSS Multiple Remote Vuln. download: http://membres.lycos.fr/fluxx/bandwebsite.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 24.11.2008 Home: www.z0rlu.blogspot.com Kucuk Bir Rica: Lutfen DemolarI...

Joovili 3.0 - Multiple SQL Injections

Joovili 3.0 - Multiple SQL Injections Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class:...

softbizfaq-sql.txt

|| | | Softbiz FAQ Script Multiple SQL Injection Vulnerability | | |--------------------IQ-Security--------------------| | | Author: Hussin X | | Home : WwW.IQ-TY.CoM | wWw.TrYaG.cC | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.softbizscripts.com | | DorK :...

EsFaq 2.0 (idcat) Remote SQL Injection Vulnerability

No description provided by source. || | | EsFaq Remote Sql Injection Exploit | | |---------------------SuB-ZeRo----------------------| | | Author: SuB-ZeRo | | Home : www.dz-security.com | | email: [email protected] | | | | | | | script...

Thickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability

No description provided by source. + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted...