Sphider 1.3.x - Admin Panel Multiple SQL Injections

Sphider 1.3.x - Admin Panel Multiple SQL Injections source: https://www.securityfocus.com/bid/48647/info Sphider is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Tradingeye Cross Site Scripting / SQL Injection

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com...

Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities

Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009 Tradingeye v6 demo BREIF DESCRIPTION Tradingeye is a fully-featured...

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting (Admin Panel)

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting Admin Panel Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =-...

Sphider SQL Injection

Sphider SQL injection vulnerabilties vendor: www.sphider.eu Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © Ando Saabas 2005-2007 Description about the Sphider Sphider is a lightweight web spider and search engine written in PHP, using...

Fire Soft Board 2.0.1 - Persistent Cross-Site Scripting (Admin Panel)

Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =-...

JOmega CMS SQL Injection

$ Exploit Title : JOMEGA CMS SQL Injection $ Versions Affected : ALL $ Date : 10-07-2011 $ Author : MasterGipy $ Email : mastergipy at gmail.com $ Bug : SQL Injection $ Google Dork : inurl:"showPG.php?Id=" $ Vulnerable files: /showCACedit.php /showEVedit.php /showFQedit.php /showFRedit.php...

Fire Soft Board <= 2.0.1 Persistent XSS Vulnerability (admin panel)

Exploit for php platform in category web applications Exploit Title: Fire Soft Board alertdocument.cookie popup with your cookies :- Fix : upgrade to last release 2.0.2 -= Greatz to x =- 0day.today 2018-04-03...

Ollance Cross Site Scripting / SQL Injection

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: Ollance login script Multiple Vulnerabilities Vendor: www.ollance.com Date: 1st july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D [email protected],NITK...

Ollance Member Login Script Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Ollance login script Multiple Vulnerabilities Vendor: www.ollance.com Date: 1st july,2011 Google Dork: Powered by Ollance Member Login Script BRIEF DESCRIPTION Ollance Member Login is a PHP membership management system. Your...

Ollance Member Login Script - Multiple Vulnerabilities

Exploit Title: Ollance login script Multiple Vulnerabilities Vendor: www.ollance.com Date: 1st july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik [email protected],NITK Google Dork: Powered by Ollance Member Login Script BRIEF DESCRIPTION Ollance Member Login is a PHP membership...

Websitesforless SQL Injection

Title : Design & Developed by:websitesforless SQL Injection Vulnerabilites Author : N-m0 E-mail : [email protected] facebook page : https://www.facebook.com/pages/N-m0/194193133965338 Tested on : http://www.girlsof360.com;tacomaglassblowin dork : Design & Developed by:websitesforless + Exploit & PoC...

DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about new security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Denial of Service, Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and thi...

PlanetComnet Admin Auth Bypass

Exploit for php platform in category web applications Exploit Title: PlanetComnet Admin Auth Bypass Date: 14 June 2011 Author: CriminalCoder Category: WebApps Software Link: www.planetcomnet.in Dork: inurl:admin.asp "Designed & Hosted by PlanetComnet" Tested on: Windows Xp SP3 Home:...

Concept Medya Admin Auth ByPass

Exploit for php platform in category web applications Exploit Title: Concept Medya Admin Auth ByPass Date: 13 June 2011 Author: CriminalCoder beyz4de.wordpress.com Category: webapps Google dork: inurl:loginkontrol.asp Tested on: Windows Xp SP3 Home: spyroot.in & rootarea.com + Default admin panel...

SUBRION CMS Cross Site Scripting / SQL Injection

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

SUBRION CMS - Multiple Vulnerabilities

1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

SUBRION CMS - Multiple Vulnerabilities

SUBRION CMS - Multiple Vulnerabilities 1.SUBRION CMS multiple vulnerabilties vendor: www.subrion.com Author: Karthik R 3psil0nLambDa Email: [email protected] My blog: epsilonlambda.co.cc Google dork: © 2011 Powered by Subrion CMS...

mWebnet Admin Auth ByPass

Exploit for php platform in category web applications /\./\./\./\./\./\./\./\./\./\./\./\./\./\./\./\./\. . + Exploit Title : mWebnet Admin Auth ByPass . + Date : 2 June 2011 at 02h54 . + Author : xConsoLe . + Category : WebApps . + d0rk : intext:website designed and managed...

New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. Which I've found in your modem. In April I've already drew attention of Ukrtelecom's representativ...