Joomla Component com_ksadvertiser SQL Injection Vulnerability

No description provided by source. Joomla Component comksadvertiser SQL Injection Vulnerability Author :FL0RiX Name : comksadvertiser Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http://server/index.php?option=comksadvertiser&pid=EXPLOIT&task=showcats EXPLOIT...

Apache Axis2 1.4.1 - Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Apache Axis21.4.1 Local File Inclusion Vulnerability Date: 2010/5/24 Author: HC Software Link: http://ws.apache.org/axis2/download/141/download.cgi Version: Axis2 1.4.1 Tested on: Linux category: Webapps Code : 1.http://Domain...

VU Mass Mailer Authentication Bypass

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

Joomla Component com_hotbrackets Blind SQL Injection Vulnerability

Joomla Component comhotbrackets Blind SQL injection Vulnerability author : Fl0riX Name : comhotbrackets Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : TRUE+ » http://server/index.php?option=comhotbrackets&id=1 and 1=1 FALSE- »...

DGNews 2.1 - SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is admin===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

AlstraSoft Forum Pay Per Post Exchange 2.0 - SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

jsite 1.0 oe (sql/lfi) Multiple Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==--...

Active Trade 2 - (default.asp catid) Remote SQL Injection Vulnerability

No description provided by source. Title : Active Trade Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactivetrade Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=32 Vuln. Username :...

slogan design Script SQL Injection Vulnerability

No description provided by source. Title: slogan design Script SQL Injection Vulnerability Version: 3.1 Author: Mr.P3rfekT Software Site: http://www.slogandesign.co.il Tested on Lunix CVE : N/A Founded By Mr.P3rfekT --- We Will Not Go Down Dork : inurl:index.php?mid= Helllo Allz. Exploit :...

mcshoutbox 1.1 (sql/xss/shell) Multiple Vulnerabilities

No description provided by source. + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc =...

Joomla ccInvoices Component (com_ccinvoices) SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component ccinvoices SQL Injection Vulnerability Author : Fl0riX Bug Researchers Name : Joomla comccinvoices Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Vendor:...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

Joomla Component com_king Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comking Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comking Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Demo Vuln. : TRUE+...

WEBBDOMAIN Post Card <= 1.02 (catid) SQL Injection Vulnerability

No description provided by source. post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php DorK :...

Azimut Technologie Admin Login Bypass vulnerability

No description provided by source...

AJ Auction Web 2.0 - (cate_id) SQL Injection Vulnerability

No description provided by source. Auction Web 2.0 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

AJ Auction 1.0 - (id) Remote SQL Injection Vulnerability

No description provided by source. AJ Auction OOPD V.1 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = = email: darkangelg85atYahooDoTcom = hussin.xathotmailDoTcom = =...

Adobe ColdFusion 9 Administrative Login Bypass

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +------------------------------------------------------------------------------+ | Packet Storm Advisory 2013-0819-2 | | http://packetstormsecurity.com/ |...

DouPHP轻量级企业建站系统后台任意文件删除缺陷

简要描述： 某处未验证删除的文件路径，导致可以删除任意文件。 官网演示站测试通过 详细说明： 漏洞文件: /admin/backup.php 第161行 / +---------------------------------------------------------- 备份删除 +---------------------------------------------------------- / if $REQUEST'rec' == 'del' $sqlfilename = $GET'sqlfilename'; if $POST'confirm' if...

Maccms 最新注入一枚。

简要描述： 看到maccms又更新了 果断下来看看。 本来可以Sql的地方还挺多。。 但是由于自带的360防注入脚本。。我没办法绕过。 还是找到了一处, 如果没这防注入的话可以直接利用这注入登录后台。。 可是。。 老老实实盲注把。 详细说明： maccms 基本上都是调用be函数来代替$POST之类的。 都做了addslashes。 在admin/adminconn.php中 function chkLogin global $db; $mid = getCookie'adminid'; $mname = getCookie'adminname'; $mcheck =...