PHP Enter Code Injection

Exploit Title : Php Enter Php Code Injection Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.phpenter.net/ Security Risk : High Version : beta Tested on : win\XP Dork : allintext: "Power...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provid...

Car Portal CMS 3.0 - Multiple Vulnerabilities

Car Portal CMS 3.0 - Multiple Vulnerabilities Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product fo...

Car Portal CMS 3.0 CSRF / XSS / Shell Upload

Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product for running auto classifieds websites. It provid...

osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Car Portal CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== Car Portal CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=502 Release Date: ============= 2012-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 502...

Clickee CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Clickee CMS Vuln Sqli Vendor: http://www.clickee.com/ Date: 18/04/2012 Author: xDarkSton3x Dork: intext:Design by Estilo y Diseño - www.estilod.com - intext:Design by Estilo y Diseño - www.clickee.com E-mail : email protected...

osCmax Shop CMS 2.5.1 Cross Site Scripting

Title: ====== osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Date: ===== 2012-04-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=497 VL-ID: ===== 497 Introduction: ============= osCMax is a powerful e-commerce/shopping cart web application. There are many...

Pyme-Web SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Pyme-Web SQL Injection Vulnerability Date: 04/04/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Pyme-Web http://www.pyme-web.com.ar/pw/index.php Test...

lifetype 1.2.11 CSRF Add User

Exploit for php platform in category web applications +---------------------------------------------------------------------------------------------------------------------------------------+ Exploit Title := lifetype 1.2.11 CSRF Add User Date := 05/april/2012 Author := khaled-Ham Software link :...

Meinfoway - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Meinfoway - SQL Injection Vulnerability ========================================================================== Title: Meinfoway - SQL Injection Vulnerability Author...

Site Go - multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Site Go - multiple Vulnerabilities D0rk: allintitle: "بوابة التدوين" Date: 12.mar.29 Author: L3b-r1'z Email Me : email protected \ email protected Security : Low Xss Vuln : in search b0x , you can put alert"Sec3ever" And you wil...

AJ HYIP CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: AJ HYIP CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/aj-hyip-advanced-latest-hyip-script/18816/ Category:: webapps Demo : http://www.ajhyip.com/demo/meridian/admin/index.php Greetz: Inj3ct0r...

Tim Hendriks Content Management System SQL Injection

Exploit Title: Content-Management-System Remote SQL Injection news.php Script Page : http://tim-hendriks.com Date: 24-3-2012 Version: Version 2.1 Author : Ali.Erroor Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 Mail: [email protected] Web Site : www.anti-network.net Injection Point ...

LiteSpeed 4.1.11 Cross Site Scripting

Hey, so i decided to open this blog with with a post about a vulnerability I’ve found quite some time ago in LiteSpeed HTTP server Basically a simple reflected XSSCross Site Scripting in the administrator panel which is another instance of the HTTP server running on port 7080 If an attacker succe...

Pre Printing Press SQL Injection

======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bug : SQL Injection | Date : 18.03.20...

PRE PRINTING STUDIO - SQL Injection

PRE PRINTING STUDIO - SQL Injection Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

PRE PRINTING STUDIO - SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Pre Printing Studio SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Acal Calendar 2.2.6 - Cross-Site Request Forgery

Exploit Title: Acal calendar 2.2.6 CSRF Vulnerability Date: 11-03-2012 Author: Number 7 Software Link: http://sourceforge.net/projects/acalproj/files/latest/download?source=directory Version: 2.2.6 Dork: "Calendar Admin: Edit Header and Footer" Tested on: Windows,Linux Add User Username: Password...