Ox Design Web Services SQL Injection

Exploit Title: Ox Design Web Services SQL Injection Vulnerability Google Dork: intext:"Powered by Ox Design Web Services" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.oxdesign.gr Version: All Version Category:: webapps Securit...

InverseFlow 2.4 - Cross-Site Request Forgery (Add Admin)

Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...

InverseFlow v2.4 CSRF Vulnerabilities (Add Admin User)

Exploit for php platform in category web applications + Exploit Title: InverseFlow v2.4 CSRF Vulnerabilities Add Admin User + Version : 2.4 + Author : EjRaM HaCkEr + Contact : m2z9.cn + Dork : inurl:"ticket.php?cmd=lost" + Software Link : http://asria.info/download/script/inverseflow.zip...

Contrexx ShopSystem 2.2 SP3 - 'catId' Blind SQL Injection

!/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount 700 CHF Vendor:...

phpwcms v1.4.7 XSRF Vulnerability (Add Admin User)

Exploit for php platform in category web applications + Exploit Title: phpwcms v1.4.7 XSRF VulnerabilityAdd Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"phpwcms Copyright" + Download Link :...

Quick CMS v3.0 Cross Site Request Forgery (Add Admin User)

Exploit for php platform in category web applications + Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link:...

Social CMS XSRF Vulnerability (Add Admin User)

Exploit for php platform in category web applications + Exploit Title: Social CMS XSRF Vulnerability Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Powered by SocialCMS" + Download Link: http://sourceforge.net/projects/socialcms/...

Quick. CMS v3. 0 CSRF flaws and fixes-vulnerability warning-the black bar safety net

Exploit Title: Quick CMS v3. 0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick. Cms v3. 0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms 1 1 0 I'm ^Xecuti0n3r member from...

phpwcms 1.4.7 Cross Site Request Forgery

Exploit Title: phpwcms v1.4.7 XSRF VulnerabilityAdd Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"phpwcms Copyright" + Download Link : http://phpwcms.googlecode.com/files/phpwcmsr412.zip + PHPCMS Official website :...

Quick.CMS 3.0 - Cross-Site Request Forgery

Quick.CMS 3.0 - Cross-Site Request Forgery + Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms...

Quick CMS 3.0 Cross Site Request Forgery

================================ + Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link:...

Quick.CMS 3.0 - Cross-Site Request Forgery

Exploit Title: Quick CMS v3.0 Cross Site Request Forgery Add Admin User + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Dork : intext:"Quick.Cms v3.0" inurl:admin.php + Demo CMS Link: http://opensolution.org/Quick.Cms 1 1 0 I'm ^Xecuti0n3r member from Inj3ct0r...

SocialCMS1.0.2 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="TRconfigurationvalue" value="HA...

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="configurationdescription" val...

Social CMS 1.0.2 Cross Site Request Forgery

Date: Wed 20 april 2011 11:18:22 AM Vendor: www.socialcms.com Download: http://sourceforge.net/projects/socialcms/ --- input type="hidden" name="INconfigurat...

Joomla! com_virtuemart <= v1.1.7 Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/python Joomla! comvirtuemart 46 million results Patch: http://dev.virtuemart.net/attachments/202/Patch-VirtueMart-1.1.7a.zip References: - http://www.stratsec.net/Research/Advisories/VirtueMart-SQL-Injection-SS-2011-003 -...

Joomla! Component com_virtuemart 1.1.7 - Blind SQL Injection

!/usr/bin/python Joomla! comvirtuemart 46 million results Patch: http://dev.virtuemart.net/attachments/202/Patch-VirtueMart-1.1.7a.zip References: - http://www.stratsec.net/Research/Advisories/VirtueMart-SQL-Injection-SS-2011-003 -...

[SECURITY] CVE-2011-0013 Apache Tomcat Manager XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2011-0013 Apache Tomcat Manager XSS vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: - - Tomcat 7.0.0 to 7.0.5 - - Tomcat 6.0.0 to 6.0.29 - - Tomcat 5.5.0 to 5.5.31 - - Earlier, unsupported versions may also be...

&#39;Free Simple Software&#39; SQL Injection Vulnerability &#40;CVE-2010-4298&#41;

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...

IBM OmniFind CSRF Vulnerability

Exploit for multiple platform in category web applications =============================== IBM OmniFind CSRF Vulnerability =============================== The forms in the administrator interface are not protected against XSRF. The attacker can do any action in the context of the victim. An examp...