[jSQL Injection v0.5] Java tool for automatic database injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. jSQL Injection change log - version 0.5 0.5 SQL shell Uploader 0.4 Admin page checker and preview Brute forcer md5...

XSS in admin/ViewIssueFields.jspa

Reproduction: 1. Create custom fields with alert1 in name and/or description. 2. Go to 'Field Configurations' 3. Click 'Add Field Configuration', enter any text in 'Name' 4. Hit okay and wait for the page to refresh 5. Choose the config you just made - XSSed...

CVE-2013-4626

Cross-site scripting XSS vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter to wp-admin/admin.php...

MusicBox 2.3.8 - Multiple Vulnerabilities

MusicBox 2.3.8 - Multiple Vulnerabilities Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008...

MusicBox 2.3.8 - Multiple Vulnerabilities

Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008 inurl:genrealbums.php?id= Vulnerability : SQL...

Musicbox 2.3.8 Cross Site Scripting / Shell Upload / SQL Injection

Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008 inurl:genrealbums.php?id= Vulnerability : SQL...

Cisco Secure Access Control System Administration Page Cross-Site Scripting Vulnerability

A vulnerability in the Administration pages of Cisco Access Control System ACS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of the affected system. The vulnerability is due to insufficient input validation of a...

[jSQL Injection v0.4] Java tool for automatic database injection

jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.4 features: GET, POST, header, cookie methods Normal, error based, blind, time based algorithms Automatic...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

Exploit for php platform in category web applications A low-privilege or guest user can inject code via the , and elements which are part of the wpfhuploadform form in http://site/obituaries/?id=ID&f=guestbook&m=add Scripts injected via the "photo-message" and "youtube-message" elements will be...

0101SHOP CMS SQL Injection

.:: In The Name Of God ::. 0101SHOP CMS SQL Injection Vulnerability Security Risk : High Discovered By IRaNHaCK Security Team MR.XpR Our WebSite : IRaNHaCK.ORG Tested On : XP , 7 , BackTrack Date : 2013-02-16 Version : All Category : WebApp...

Guru Auction 2.0 SQL Injection

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Guru...

Guru Auction 2.0 SQL Injection Vulnerabilities

Exploit for php platform in category web applications ----------------------------------------------------------------------- Guru Auction 2.0 Multiple SQL Injection Vulnerabilities ----------------------------------------------------------------------- Author : v3n0m Site : http://ycl.sch.id/ Da...

Guru Auction 2.0 - Multiple SQL Injections

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- Guru...

A1 Creation SQL Injection

| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: A1 Creation admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : Category: Web...

SuperCheapCallSltd SQL Injection

| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: SuperCheapCallSltd admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : High Category:...

Apex Software House SQL Injection

| \ | / /| | | / || \ | D | \ | || o || | | / | |\ || / || || | | | \ | |/ \ || | || || | | | . \ | |\ || | || | || | | ||||||||||||||| Exploit name: Apex Software House admin page bypass Google dork: Make one by yourself ! Exploit author: Risman Tested on: Linux Security Risk : High Category:...

Design/Logic Flaw

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to inject arbitrary web script or HTML via the path parameter...

Sql injection

SQL injection vulnerability in admin/index.php in jCore before 1.0pre2 allows remote attackers to execute arbitrary SQL commands via the memberloginid cookie...

CVE-2012-4990

SQL injection vulnerability in admin/campaign-zone-link.php in OpenX 2.8.10 before revision 81823 allows remote attackers to execute arbitrary SQL commands via the ids parameter in a link action...