PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability

PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features include: web based admin, surveys, top page, access stats pag...

SSWebPlus CMS SQL Injection

SSWebPlus CMS Sql injection Vulnerability Author:H3X Credit:Sepehr Security Team Vulnerable Page:infoview.php?idx= Admin page:http://site/admin/ Google Dork:inurl:infoview.php?idx= Affected Software : SSWebPlus CMS Exploit+: http://site/infoview.php?idx=SQLInjection Example+:...

Imageview v6.0 Remote [and] Local Directory Traversal Vulnerability

Exploit Title: Imageview v6.0 Remote and Local Directory Traversal Vulnerability Google Dork: inurl:"/imageview6/" home : www.D99Y.com Date: 27/2/2011 Author: Difficult 511 Software Link: http://www.blackdot.be/files/downloads/imageview6-install.zip Version: 6.0 Tested on: windows xp sp2 file :...

TinyWebGallery 1.8.3 - Multiple Vulnerabilities

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

RW-Download 4.0.6 - 'index.php' SQL Injection

/////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php // //Download||=...

RW-Download v4.0.6 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications /////////////////////////Dr.NeT/////////////////////////////////Dr.NeT//////////////////////Dr.NeT////////// //Title ||= RW-Download v4.0.6 = index.php SQL Injection Vulnerability // //Secript ||= RW-Download // //Language||= Php //...

Pixie CMS 1.0.4 - '/admin/index.php' SQL Injection

source: https://www.securityfocus.com/bid/45937/info Pixie is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modif...

CubeCart 3.0.4 - SQL Injection

CubeCart 3.0.4 - SQL Injection ///////////////////////////////...

CubeCart 3.0.4 - SQL Injection

///////////////////////////////...

web-magik CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= web-magik CMS SQL Injection Vulnerability ========================================= Vendor : http://web-magik.com/ prices : Not Yet:P Discovered by : cyberlog Site : Sekuritionline.net Channel :...

Pre Web Host Solution SQL Injection

In The Name Of GOD + Exploit Title: PRE WEB HOST SOLUTION SQL Injection Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/preweb.asp + Price : 150.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...

Pre Online Tests Generator Pro SQL Injection

In The Name Of GOD + Exploit Title: Pre Online Tests Generator Pro SQL Injection Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/preexampro.asp + Price : 95.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad...

Pre Online Tests Generator Pro SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Pre Online Tests Generator Pro SQL Injection Vulnerability ========================================================== In The Name Of GOD + Exploit Title: Pre Online Tests Generator Pro...

Pre Wew Hhost Solution SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================== Pre Wew Hhost Solution SQL Injection Vulnerability ================================================== In The Name Of GOD + Exploit Title: PRE WEB HOST SOLUTION SQL Injection Vulnerability +...

Pre Online Tests Generator Pro - SQL Injection

Pre Online Tests Generator Pro - SQL Injection In The Name Of GOD + Exploit Title: Pre Online Tests Generator Pro SQL Injection Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/preexampro.asp + Price : 95.00$ + Contact : [email protected] + Websit...

Pre Online Tests Generator Pro - SQL Injection

In The Name Of GOD + Exploit Title: Pre Online Tests Generator Pro SQL Injection Vulnerability + Date: 2010-11-13 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/preexampro.asp + Price : 95.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad...

Month Of Abysssec Undisclosed Bugs - ASPMass Shopping Cart

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-30-aspmass-shopping-cart-vulnerability-file-upload-csrf/ ''' Abysssec Inc Public Advisory Title : ASPMass Shopping Cart Vulnerability File...

Month Of Abysssec Undisclosed Bugs - JMD-CMS 3.0.0.9

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote Vulnerabilities Affected Version :...

jmd-cms - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote Vulnerabilities Affected Version :...

jmd-cms - Multiple Vulnerabilities

jmd-cms - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-19-jmd-cms-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : JMD-CMS Multiple Remote...