Just Dial Marketplace - Authentication Bypass

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Hindu Matrimonial Script - Authentication Bypass

Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-script/ Author: İhsan Şencan Author Web: http://ihsan.net...

Online Food Delivery 2.04 - Authentication Bypass

Vulnerability: Online Food Delivery v2.04 Authentication bypass Date: 12.01.2017 Software link: http://itechscripts.com/food-delivery/ Demo: http://restaurant.itechscripts.com Price: 49$ Category: webapps Exploit Author: Dawid Morawski Website: http://www.morawskiweb.pl Contact:...

UBUNTU-CVE-2016-4807

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user admin...

My Link Trader 1.1 SQL Injection

Vulnerability:: Admin Login Bypass & SQLi Date:09.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: v1.1 Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=13 Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

My Link Trader 1.1 - Authentication Bypass

My Link Trader 1.1 - Authentication Bypass Vulnerability:: Admin Login Bypass & SQLi Date:09.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: v1.1 Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=13 Author: Ihsan Sencan...

My Click Counter Authentication Bypass Vulnerability

My Click Counter is a PHP-based click counter that can also be used as a download counter. An authentication bypass vulnerability exists in the administrator login page of My Click Counter version 1.0, which can be exploited by attackers to gain administrator privileges...

My Click Counter 1.0 - Authentication Bypass

My Click Counter 1.0 - Authentication Bypass x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: My Click Counter x Script Version: 1.0 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=15 x Author: AnarchyAngel AKA Adam x Mail :...

Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection

Type user access: admins user. $GET‘id’ is not escaped. Is accessible for only admins user. 1 - logged with admin user; 2 - send resquest get; http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings&id=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wpterms+WHERE+termid%3D1...

Weak Password Vulnerability in Sichuan Green Blue e-Government System Website

Sichuan green blue e-government system is an e-government building system. Weak password vulnerability exists in some websites of Sichuan Green Blue e-government system. Allow attackers to use the account password admin/scjg888 to log in to the system background, to obtain sensitive information...

ZX_CSV Upload 1 – Authenticated SQL Injection

Type user access: admin user. $GET‘id’ is not escaped. URL is accessible for every registered user. 1 – Login with admin user. 2 - Send request post:...

Edge SkateShop - Authentication bypass

Edge SkateShop - Authentication bypass Exploit Title: Edge SkateShop Authentication Bypass Date: 6/12/2016 Exploit Author: Delilah Vendor HomePage: http://www.sourcecodester.com/php/10964/basic-shopping-cartphpmysql.html Software Link:...

Multiple SQL Injection Vulnerabilities in XYCMS (PHP version) Message Boards

XYCMS, formerly known as Nanjing XYCMS Enterprise Station Building System, is a commercial website building system developed based on ASP. The designed version is divided into dynamic and static version. XYCMS PHP version message board has multiple SQL injection vulnerabilities. Through the...

Telpho10 Credentials Disclosure Vulnerability

It is possible to create and read a configuration backup of Telpho10. This backup contains the credentials for admin login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CG-WLR300NX fails to restrict access permissions

Overview CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX fails to restrict access permissions. Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Weak Password Vulnerability in Free Planning Enterprise Website Management System

Free Planner Enterprise Website Management System is an ASP-based website builder. Freedom of planning enterprise website management system default weak password vulnerability, attackers exploit the vulnerability through the default weak password admin/admin login website background, get backgrou...

Weak Password Vulnerability in NetDrive Unified Communications Platform (Active-UC)

NetDynamic Unified Communications platform Active-UC provides office communication services for enterprises, integrating various communication devices, media and applications. A weak password vulnerability exists in NetDrive Unified Communications Platform Active-UC. Account password: admin /...

windgap-pa.gov XSS vulnerability

Vulnerable URL: http://windgap-pa.gov/admin/login.php Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 11:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11038053 VIP website status:| No Check windgap-pa.gov...

Weak password vulnerability in NetSense Firewall Security Audit System (secfox)

NetShen Firewall is a well-known firewall in China, products related to the net gate, sslVPN, security audit, ssh and so on. A weak password vulnerability exists in the security audit system secfox of NetShen Firewall, which can be exploited by an attacker to log in as an administrator. The...

miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post)

Exploit for php platform in category web applications Exploit Title : miniblog 1.0.1 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : Date : 09/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.spyka.net/scripts/php/miniblog Software link :...