FRticket Ticket System - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most...

FRticket Ticket System - Persistent Cross-Site Scripting

Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most popular customer support ticket system. FRticket is...

Grid Gallery 1.0 - Admin Panel Authentication Bypass

Grid Gallery 1.0 - Admin Panel Authentication Bypass ======================================================================================================= Grid Gallery 1.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built up...

FRticket Ticket System 1 Cross Site Scripting

Exploit Title: FRticket - Ticket System - Stored XSS Google Dork: if applicable Date: 11.06.2016 Exploit Author: Hamit ABİŞ Vendor Homepage: http://codecanyon.net/item/frticket-ticket-system/16539836 Version: v1 About Get the world’s most popular customer support ticket system. FRticket is...

Grid Gallery 1.0 - Admin Panel Authentication Bypass

======================================================================================================= Grid Gallery 1.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built upon Grid Gallery as they can gain access to the admin...

Grid Gallery 1.0 Authentication Bypass

======================================================================================================= Grid Gallery 1.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built upon Grid Gallery as they can gain access to the admin...

Dream Gallery 2.0 - Admin Panel Authentication Bypass

Exploit for php platform in category web applications ======================================================================================================= Dream Gallery 2.0 Admin panel Authentication bypass Description : An Attackers are able to completely compromise the web application built...

Electroweb Online Examination System 1.0 SQL Injection

Exploit Title: Online examination system 1.0 - SQL Injection Google Dork: inurl:showtest.php?subid= Date: 2016/06/05 Exploit Author: Ali Ghanbari Vendor Homepage: http://www.onlinefreeprojectdownload.com Sofware Link :...

Electroweb Online Examination System 1.0 - SQL Injection

Electroweb Online Examination System 1.0 - SQL Injection Exploit Title: Online examination system 1.0 - SQL Injection Google Dork: inurl:showtest.php?subid= Date: 2016/06/05 Exploit Author: Ali Ghanbari Vendor Homepage: http://www.onlinefreeprojectdownload.com Sofware Link :...

Electroweb Online Examination System 1.0 - SQL Injection

Exploit Title: Online examination system 1.0 - SQL Injection Google Dork: inurl:showtest.php?subid= Date: 2016/06/05 Exploit Author: Ali Ghanbari Vendor Homepage: http://www.onlinefreeprojectdownload.com Sofware Link :...

Electroweb Online Examination System 1.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Online examination system 1.0 - SQL Injection Google Dork: inurl:showtest.php?subid= Date: 2016/06/05 Exploit Author: Ali Ghanbari Vendor Homepage: http://www.onlinefreeprojectdownload.com Sofware Link :...

CMSimple 4.6.2 Cross Site Scripting

============================================= MGC ALERT 2016-004 - Original release date: May 28, 2016 - Last revised: June 1, 2016 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I. VULNERABILITY -------------------------...

Open Source Real Estate Script 3.6.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: real-estate classified script Sql Injection Date: 2015-05-29 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.phpscriptsmall.com/product/open-source-real-estate-script/ Version: 3.6.0...

Open Source Real Estate Script 3.6.0 - SQL Injection

Exploit Title: real-estate classified script Sql Injection Date: 2015-05-29 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/open-source-real-estate-script/ Version: 3.6.0 Exploit :...

PHP Real Estate Script 4.9.0 SQL Injection

Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0 Exploit :...

PHP Realestate Script Script 4.9.0 - SQL Injection

Exploit for php platform in category web applications Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef email protected or email protected Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0 Exploi...

PHP Realestate Script Script 4.9.0 - SQL Injection

Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0 Exploit :...

PHP Realestate Script Script 4.9.0 - SQL Injection

PHP Realestate Script Script 4.9.0 - SQL Injection Exploit Title: Property Agent RealeState Script Sql Injection Date: 2015-05-27 Exploit Author: Meisam Monsef [email protected] or [email protected] Vendor Homepage: http://www.phpscriptsmall.com/product/php-realestate-script/ Version: 4.9.0...

Phpwind GET型CSRF任意代码执行 漏洞

来源链接：http://www.wooyun.org/bugs/wooyun-2016-01758150-tsina-1-93389-397232819ff9a47a7b7e80a40613cfe1 这个洞其实很有意思，最可惜的地方就是其触发位置在后台，否则它将是一个绝无仅有的好洞。 0x01 后台反序列化位置 首先纵览整个phpwindv9，反序列化的位置很多，但基本都是从数据库里取出的，很难完全控制序列化字符串。 最后，找到三处： 可恶的是，三处都在后台的Task模块下。Task模块是『任务中心』功能，只有能进入后台的用户才可以访问： 随便打开一个，...

Admin panel UliCMS SQL Injection Vulnerability

UliCMS is a web content management solution. A SQL code injection exists due to the "countryblacklist" variable of the page "action=spamfilter". An attacker can exploit the vulnerability to execute database code...