Ez Poll Hoster - Multiple XSS and CSRF Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Ez Poll Hoster Multiple XSS and XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 14. December 2009...

plx Ad Trader 3.2 Authentication Bypass Vulnerability

No description provided by source. Vendor or Software Link: http://www.plxwebdev.com/script/adtrader/ Category:WebApp Version: 3.2 Price: 60 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Yo...

Joomla Component JomSocial 1.6.288 Multiple XSS

No description provided by source. Software Link: http://jomsocial.com Version: 1.6.288 Since Sid3^effects published a single one of these 21 June 2010 - http://www.exploit-db.com/exploits/13955/ - I figured the cat's out of the bag... His exploit works even on 1.8RC1, however it gets sanitized...

XCMS <= 1.83 Remote Command Execution Exploit

No description provided by source. Name : XCMS = v1.83 Remote Command Execution Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.xcms.it Date : 28/12/2007 Dork : inurl:mod=notizie The xcms's footerthat is in /dati/generali/footer.dtb is...

SiteGenius Blind SQL injection Vulnerability

No description provided by source. ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL...

ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : download this free gallery at matteobinda.com : allinurl: imgbig.asp?id= Found By : Ruben Ventura Pi...

Fire Soft Board <= 2.0.1 Persistent XSS Vulnerability (admin panel)

No description provided by source. Exploit Title: Fire Soft Board = 2.0.1 Persistent XSS Vulnerability admin panel Date: 2011-07-11 Author: jill for A-S Software Link: http://www.fire-soft-board.com/index.php?p=download&mode=cat&id=2 Version: 2.0.1 There is a vulnerability on Fire Soft Board foru...

Ripe Website Manager (CMS) <= 0.8.9 - Remote File Inclusion Vulns

No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: = v0.8.9 Type:: Remote File Include Source:: http://sourceforge.net/project/showfiles.php?groupid=194532 Bug:: - Files:...

Simple File Manager v.024 - Login Bypass Vulnerability

No description provided by source. Exploit Title: Simple File Manager v.024 Login Bypass Vulnerability Date Published: 2013/6/17 Exploit Author: Chako Software Link: http://onedotoh.sourceforge.net/ Version: v.024 Doesn't work on v.025 Description: ===================== A vulnerability has been...

Maian Uploader <= 4.0 Insecure Cookie Handling Vulnerability

No description provided by source. -+================================================================================+- -+ Maian Uploader = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...

SiteTurn Domain Manager Pro Admin Panel Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15186/info Domain Manager Pro is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Absolute File Send 1.0 - Remote Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute File Send see script...

LinkBase 2.0 - Remote Cookie Grabber Vulnerability

No description provided by source. + Download LinkBase 2.0 Cookie Grabber Exploit + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Greetz : All my friends + Make 2 files and upload to your host : stealer.php - Put the following code into the file : ?php $cookie = $GET'cookie'; $lo...

OCS Inventory NG 2.0.1 Persistent XSS

No description provided by source. OCS Inventory NG 2.0.1 - Persistent XSS CVE-2011-4024 ------------------------------------------------------- Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailco...

Simpel Side - (index2.php) SQL Injection Vulnerability

No description provided by source. Tital : simpelside index2.php SQL Injection VulnerabilityEDB-ID: CVE-ID: OSVDB-ID: Author: MN9 Published: 2010-05-25 Verified: yes .. Author : MN9 .. Email : Mn9atLive.No .. Script Home : www.simpelside.dk .. Doork : : Exploit http://site/index2.php?id=2 SQL...

Buddy Zone <= 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR:...

SineCMS <= 2.3.4 Calendar Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

SG Real Estate Portal 2.0 - Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' SG Real Estate Portal 2.0 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Admin Panel: Target/SG/ Usage: php '.$argv0.' Target Userid Example : php '.$argv0....

Recipe Script 5.0 - Shell Upload/CSRF/XSS Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------------- Title: Recipe Script v5.0 Shell Upload/XSRF/XSS Multiple Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 16. December 2009...

Softbiz Jobs & Recruitment Remote SQL Injection Vulnerability

No description provided by source. Softbiz Jobs & Recruitment Script SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: Powered by SoftbizScripts ALL JOBS Injection Adress : http://site.com/browsecats.php?cid=sql cod Sql code For see user nam...