SourceBans 1.4.8 - SQL Injection Local File Inclusion Injection

SourceBans 1.4.8 - SQL Injection Local File Inclusion Injection Exploit Title: SourceBans In memory of crashfr who will NEVER die. Merci pour tout mec! ;-... R.I.P. ./EOF...

ESPCMS pass to kill 0day-vulnerability warning-the black bar safety net

Baidu keywords:inurl:index. php? ac=article&at=read&did= =========================================================================================================== 默认 后台 :adminsoft/index.php OR admin...

eSyndiCat Pro 2.3.05 Cross Site Scripting

Exploit Title: eSyndiCat Pro v2.3.05 Cross-Site Scripting XSS Script Page : http://www.esyndicat.com Date: 24:11:2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can be performed als...

Multiple vulnerabilities in PHPShop CMS Free

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in PHPShop CMS Free, which can be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-Site Scripting in PHPShop CMS Free 1.1 Input appended to the URL after multiple files is not properly...

x10 Adult Media Script - Persistent Web Vulnerabilities

Document Title: =============== x10 Adult Media Script - Persistent Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=301 Release Date: ============= 2011-10-31 Vulnerability Laboratory ID VL-ID: ==================================== 301...

Mndajans Script SQL Injection

Exploit Title: Mndajans Script SQL Injection Date: 29.10.2011 - 16.13 Author: Mr.PaPaRoSSe Tested On: BackTrack 5 - Win7 Platform: Php ------------------------------------------------------------- Scripts are mndbilgisayar ------------------------------- default user : mndajans default pass :...

Bleeding Life 2 Exploit Pack Released

Bleeding Life 2 Exploit Pack Released Black Hat Academy releases Bleeding Life 2 exploit pack. This is an exploit pack that affects Windows-based web browsers via Adobe and Java. You can read all about it, and download it for yourself. Statistics are kept based on exploit, browser, and OS version...

OCS Inventory NG 2.0.1 - Persistent Cross-Site Scripting

OCS Inventory NG 2.0.1 - Persistent XSS CVE-2011-4024 ------------------------------------------------------- Software : Open Computer and Software OCS Inventory NG Download : http://www.ocsinventory-ng.org/ Discovered by : Nicolas DEROUET nicolas.derouetgmailcom Discover : 2011-10-04 Published :...

Kolifa Haber Script 1.3 SQL Injection

Exploit Title: Kolifa Haber Script 1.3 SQL Date: 08.10.2011 - 20:36 Author: Mr.PaPaRoSSe Download Script: http://scripti.org/demo.php?id=97 Tested On: BackTrack 5 - Windows xp sp3 Platform: Php Vunl file : show.php Exploit: http://localhost/haberpro/kategorigoster.php?katid=SQL injection Panel:...

CVE-2010-4907

Cross-site scripting XSS vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562...

Keydesigns SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Keydesigns SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SiteGenius - Blind SQL Injection

===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL Home : HackForums.AL ,...

SiteGenius Blind SQL injection Vulnerability

Exploit for php platform in category web applications ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author ...

Vegetav (news_item.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Vegetav newsitem.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.vegetav.co.uk/ Persian Gulf 4 Ever! Dork : "website design by Vegetav" "inurl:newsitem.php?id="...

Agent Image (news_details.php?news_ID) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Agent Image newsdetails.php?newsID AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.agentimage.com/ Persian Gulf 4 Ever! Dork : "Design by Agent Image"...

Link Station Pro Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Link Station Pro Multiple Vulnerabilities Vendor: www.linkstationpro.com Date: 28th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: � 2011 Copyright...

Link Station Pro SQL Injection / Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title: Link Station Pro Multiple Vulnerabilities Vendor: www.linkstationpro.com Date: 28th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D...

ThaiWebCenter SQL Injection

x Exploit Title: THAIWEBCENTER SQL Injection Vulnerability x Date: 26/07/2011 x Author: 3spi0n x HomePage: Http://Www.3spi0n.NET | Http://Twitter.Com/RigidusCO x E-Mail: 3spi0natgmaildotcom x Software Link: http://www.thaiwebcenter.net/ x Category: WebApps x Google Dork: "Powered by:...

ShopEye SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability ShopEye catsell.php?cid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.shopeye.de/ Persian Gulf 4 Ever! Exploite: www.victim.com/catsell.php?cid=SQL Example :...