2394 matches found
B2B Portal Script Blind SQL Injection
x========================================================================================================================================x | Title : B2B Portal Script Blind SQL Vulnerabilities | Software : B2B Portal Script | Vendor : http://www.i-netsolution.com/ | Demo :...
PHP Classifieds Rental Script - Blind SQL Injection
x========================================================================================================================================x | Title : PHP Classifieds Rental Script Blind SQL Vulnerabilities | Software : PHP Classifieds Rental Script | Vendor : http://www.i-netsolution.com/ | Demo :...
Just Dial Clone Script - 'fid' SQL Injection
x========================================================================================================================================x | Title : Just Dial Clone Script SQL & XSS Vulnerabilities | Software : Just Dial Clone | Vendor : http://www.i-netsolution.com/ | Demo :...
The Realm / Dashgum Software CMS Admin Page ByPass Vulnerability
Exploit for php platform in category web applications Exploit Title : The Realm / Dashgum Software CMS Admin Page ByPass Exploit Author : xBADGIRL21 version The Realm : 1.0.1 version Dashgum : v2 Vendor : http://www.bluthemes.com/item/realm - http://gridgum.com/themes/dashgum-bootstrap-dashboard/...
Imrokraft Solutions CMS Admin Page ByPass Vulnerability
Exploit for php platform in category web applications Exploit Title : Imrokraft Solutions CMS Admin Page ByPass Exploit Author : xBADGIRL21 Dork : intext:"Designed by Imrokraft Solutions" or intext:"Powered By : Imrokraft Solutions" Vendor : http://www.imrokraft.com/ Tested on: Windows...
Fastspot BigTree CMS SQL Injection Vulnerability
Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. An SQL injection vulnerability exists in the admin.php page in Fastspot BigTree CMS versions prior to 4.2.11, which can be exploited by an attacker to compromise an...
BLACKBOx - A Penetration Testing Framework
Password Attacks: MD5 CRACKER SHA1 CRACKER SHA224 CRACKER SHA256 CRACKER SHA384 CRACKER SHA512 CRACKER MSSQL2000 CRACKER MSSQL2005 CRACKER MYSQL323 CRACKER MYSQL41 CRACKER ORACLE11 CRACKER Web Hacking : Wordpress Bruteforce – Bruteforce wordpress panel FTP Bruteforce – Bruteforcing FTP LOGIN SSH...
Telepecas Script Admin Page Default Password Vulnerability
Telepecas Script is a web administration page. A default password vulnerability exists in the Telepecas Script administration page. This allows an attacker to exploit the default account password to obtain sensitive information...
Drupal Core Full config export configuration file unauthorized download vulnerability
Author: p0wd3r know Chong Yu 404 security lab 0x00 vulnerability overview 1. Vulnerability description Drupal （ https://www.drupal.org is a free open source content management system, recent researchers have found in it 8. x 8.1.10 version found three security vulnerabilities, one vulnerability...
Jobberbase 2.0 - Multiple Vulnerabilities
Jobberbase 2.0 - Multiple Vulnerabilities Jobberbase: http://www.jobberbase.com/ Version: 2.0 By Ross Marks: http://www.rossmarks.co.uk 1 Local path disclosure - change any variable to an array and in most cases it will tell you the local path where the application is installed eg...
SQL injection vulnerability in the id parameter of the page of the digital newspaper system /www/index.php?mod=admin&con=adminuser&act=mypwdpost
Joy Reading Kiosk Digital Newspaper System is a digital newspaper WEB management system. There are SQL injection vulnerabilities in this product, the vulnerability URL is: /www/index.php?mod=admin&con=adminuser&act=mypwdpost, the vulnerability parameter is: id, POST method of injection, the...
WordPress Email Users 4.8.3 Cross Site Request Forgery
------------------------------------------------------------------------ Cross-Site Request Forgery vulnerability in Email Users WordPress Plugin ------------------------------------------------------------------------ Julien Rentrop, July 2016...
WordPress Count per Day 3.5.4 Plugin - Persistent Cross-Site Scripting
Exploit for php platform in category web applications Stored Cross-Site Scripting vulnerability in Count per Day WordPress Plugin Abstract A Cross-Site Scripting vulnerability was found in the Count per Day WordPress Plugin. This issue can be exploited by an unauthenticated attacker and allows an...
The Han Code of College graduate employment system /admin/manager/admin_voting_show.php page_id parameter SQL injection
No description provided by source...
Getsimple CMS 3.3.10 Shell Upload
Exploit Title: Getsimple CMS 2. An attacker login to the admin page and uploading the backdoor 3. The uploaded file will be under the "/data/uploads/" folder Report Timeline ============...
WordPress Plugin Ultimate Product Catalog 3.8.1 - Privilege Escalation
/Functions/UpdateAdmin-Databases.php file. Remote attackers are able to request crafted data of the POST method request with the vulnerable ´accesrole´ parameter. The security risk of the privilege scalation web vulnerability is estimated as high with a cvss common vulnerability scoring system...
Nextcloud: https://newsletter.nextcloud.com Directory listening and Information Disclosure
Hi, This is the domain that we are going to work about it as you know: https://newsletter.nextcloud.com/ Firstly I want to tell https://newsletter.nextcloud.com/admin when you are trying to navigate this link it needs authentication.But when you are doing this with via IP...
Pornhub: (Pornhub & Youporn & Brazzers ANDROID APP) : Upload Malicious APK / Overrite Existing APK / Android BackOffice Access
The researcher discovered weak credentials protecting an Android APK admin page...
phpMyFAQ Cross-Site Request Forgery Vulnerability
phpMyFAQ is a multi-language, fully database-driven FAQ system. A cross-site request forgery vulnerability exists in phpMyFAQ. Due to the application failing to properly validate the 'Interface Translation' translation function of the originating HTTP request. An unauthenticated remote attacker c...