Just Dial Marketplace - Authentication Bypass

Just Dial Marketplace - Authentication Bypass Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web: http://ihsan.net...

Open Source Real-Estate Script - SQL Injection

Open Source Real-Estate Script - SQL Injection Vulnerability: SQL Injection + Admin Login Bypass Date: 13.01.2017 Vendor Homepage: http://phprealestatescript.org/ Script Name: Open Source Real-Estate Script Script Buy Now: http://phprealestatescript.org/open-source-real-estate-script.html Author:...

Professional Service Booking Script - SQL Injection

Professional Service Booking Script - SQL Injection Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: http://scriptfirm.com/professional-service-booking-engine Author: İhsan Şencan...

Courier Business Website Script - Authentication Bypass

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Courier Business Website Script Script Buy Now: http://scriptfirm.com/courier-business-website Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Hindu Matrimonial Script - Authentication Bypass

Vulnerability:: Admin Login Bypass & SQLi + Add/Edit Date: 13.01.2017 Vendor Homepage: http://www.phpmatrimonialscript.in/ Script Name: Hindu Matrimonial Script Script Buy Now: http://www.phpmatrimonialscript.in/product/hindu-matrimonial-script/ Author: İhsan Şencan Author Web: http://ihsan.net...

Professional Service Booking Script - SQL Injection

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: http://scriptfirm.com/professional-service-booking-engine Author: İhsan Şencan Author Web: http://ihsan.net Mail :...

My Private Tutor Website Script - Authentication Bypass

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Professional Service Booking Script Script Buy Now: My Private Tutor Website Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet http://localhost/PATH/admin...

Just Dial Marketplace - Authentication Bypass

Vulnerability: Admin Login Bypass & SQLi Date: 13.01.2017 Vendor Homepage: http://scriptfirm.com/ Script Name: Just Dial Marketplace Script Script Buy Now: http://scriptfirm.com/just-dial-marketplace Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Online Food Delivery 2.04 - Authentication Bypass

Vulnerability: Online Food Delivery v2.04 Authentication bypass Date: 12.01.2017 Software link: http://itechscripts.com/food-delivery/ Demo: http://restaurant.itechscripts.com Price: 49$ Category: webapps Exploit Author: Dawid Morawski Website: http://www.morawskiweb.pl Contact:...

UBUNTU-CVE-2016-4807

Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user admin...

My Link Trader 1.1 SQL Injection

Vulnerability:: Admin Login Bypass & SQLi Date:09.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: v1.1 Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=13 Author: Ihsan Sencan Author Web: http://ihsan.net Mail :...

My Link Trader 1.1 - Authentication Bypass

My Link Trader 1.1 - Authentication Bypass Vulnerability:: Admin Login Bypass & SQLi Date:09.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Script Name: My Link Trader Script Version: v1.1 Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=13 Author: Ihsan Sencan...

My Click Counter Authentication Bypass Vulnerability

My Click Counter is a PHP-based click counter that can also be used as a download counter. An authentication bypass vulnerability exists in the administrator login page of My Click Counter version 1.0, which can be exploited by attackers to gain administrator privileges...

My Click Counter 1.0 - Authentication Bypass

My Click Counter 1.0 - Authentication Bypass x Type: Admin login bypass via SQLi x Vendor: http://software.friendsinwar.com/ x Script Name: My Click Counter x Script Version: 1.0 x Script DL: http://software.friendsinwar.com/downloads.php?catid=2&fileid=15 x Author: AnarchyAngel AKA Adam x Mail :...

Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection

Type user access: admins user. $GET‘id’ is not escaped. Is accessible for only admins user. 1 - logged with admin user; 2 - send resquest get; http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings&id=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wpterms+WHERE+termid%3D1...

Weak Password Vulnerability in Sichuan Green Blue e-Government System Website

Sichuan green blue e-government system is an e-government building system. Weak password vulnerability exists in some websites of Sichuan Green Blue e-government system. Allow attackers to use the account password admin/scjg888 to log in to the system background, to obtain sensitive information...

ZX_CSV Upload 1 – Authenticated SQL Injection

Type user access: admin user. $GET‘id’ is not escaped. URL is accessible for every registered user. 1 – Login with admin user. 2 - Send request post:...

Edge SkateShop - Authentication bypass

Edge SkateShop - Authentication bypass Exploit Title: Edge SkateShop Authentication Bypass Date: 6/12/2016 Exploit Author: Delilah Vendor HomePage: http://www.sourcecodester.com/php/10964/basic-shopping-cartphpmysql.html Software Link:...

Multiple SQL Injection Vulnerabilities in XYCMS (PHP version) Message Boards

XYCMS, formerly known as Nanjing XYCMS Enterprise Station Building System, is a commercial website building system developed based on ASP. The designed version is divided into dynamic and static version. XYCMS PHP version message board has multiple SQL injection vulnerabilities. Through the...

Telpho10 Credentials Disclosure Vulnerability

It is possible to create and read a configuration backup of Telpho10. This backup contains the credentials for admin login. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...