Easy to enterprise network Cms Admin Page Bypass

No description provided by source...

RDL Web Tasarim Administration Page Authentication Bypass Vulnerability

An authentication bypass vulnerability exists in the RDL Web Tasarim administrator page, which could allow an attacker to bypass login authentication to access backend administration pages...

miniblog Cross-Site Request Forgery Vulnerability

miniblog is a lightweight blog and news system for websites written in PHP and MySQL. A cross-site request forgery vulnerability exists in the admin.php page of miniblog version 1.0.1, which can be exploited by attackers to add, delete, and edit posts...

Entrepreneur Job Portal Script 2.06 - SQL Injection

Entrepreneur Job Portal Script 2.06 - SQL Injection x========================================================================================================================================x | Title : Entrepreneur Job Portal Script SQL Injection | Software : Entrepreneur Job Portal Script | Versi...

B2B Portal Script Blind SQL Injection

x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...

PHP Classifieds Rental Script - Blind SQL Injection

x========================================================================================================================================x | Title : PHP Classifieds Rental Script Blind SQL Vulnerabilities | Software : PHP Classifieds Rental Script | Vendor : http://www.i-netsolution.com/ | Demo :...

Just Dial Clone Script - 'fid' SQL Injection

x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...

Imrokraft Solutions CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : Imrokraft Solutions CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork : intext:"Designed by Imrokraft Solutions" or intext:"Powered By : Imrokraft Solutions" Vendor : http://www.imrokraft.com/ Tested on: Windows...

The Realm / Dashgum Software CMS Admin Page ByPass Vulnerability

Exploit for php platform in category web applications Exploit Title : The Realm / Dashgum Software CMS Admin Page ByPass Exploit Author : xBADGIRL21 version The Realm : 1.0.1 version Dashgum : v2 Vendor : http://www.bluthemes.com/item/realm - http://gridgum.com/themes/dashgum-bootstrap-dashboard/...

Fastspot BigTree CMS SQL Injection Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An SQL injection vulnerability exists in the admin.php page in Fastspot BigTree CMS versions prior to 4.2.11, which can be exploited by an attacker to compromise an...

BLACKBOx - A Penetration Testing Framework

Password Attacks: MD5 CRACKER SHA1 CRACKER SHA224 CRACKER SHA256 CRACKER SHA384 CRACKER SHA512 CRACKER MSSQL2000 CRACKER MSSQL2005 CRACKER MYSQL323 CRACKER MYSQL41 CRACKER ORACLE11 CRACKER Web Hacking : Wordpress Bruteforce – Bruteforce wordpress panel FTP Bruteforce – Bruteforcing FTP LOGIN SSH...

Telepecas Script Admin Page Default Password Vulnerability

Telepecas Script is a web administration page. A default password vulnerability exists in the Telepecas Script administration page. This allows an attacker to exploit the default account password to obtain sensitive information...

Drupal Core Full config export configuration file unauthorized download vulnerability

Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...

Jobberbase 2.0 - Multiple Vulnerabilities

Jobberbase 2.0 - Multiple Vulnerabilities Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...

SQL injection vulnerability in the id parameter of the page of the digital newspaper system /www/index.php?mod=admin&con=adminuser&act=mypwdpost

Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There are SQL injection vulnerabilities in this product, the vulnerability URL is: /www/index.php?mod=admin&con=adminuser&act=mypwdpost, the vulnerability parameter is: id, POST method of injection, the...

WordPress Email Users 4.8.3 Cross Site Request Forgery

------------------------------------------------------------------------ Cross-Site Request Forgery vulnerability in Email Users WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...

WordPress Count per Day 3.5.4 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an...

The Han Code of College graduate employment system /admin/manager/admin_voting_show.php page_id parameter SQL injection

No description provided by source...

Getsimple CMS 3.3.10 Shell Upload

Exploit Title: Getsimple CMS 2. An attacker login to the admin page and uploading the backdoor 3. The uploaded file will be under the "/data/uploads/" folder Report Timeline ============...

WordPress Plugin Ultimate Product Catalog 3.8.1 - Privilege Escalation

/Functions/UpdateAdmin-Databases.php file. Remote attackers are able to request crafted data of the POST method request with the vulnerable ´accesrole´ parameter. The security risk of the privilege scalation web vulnerability is estimated as high with a cvss common vulnerability scoring system...