vbBux / vbPlaza 4.0.3 SQL Injection

Exploit Title: vbBux and vbPlaza v4 SQLI Authors: n3tw0rk twiiter.com/n3tw0rkgod Contact: Mail:[email protected] Product: 4.0.3 and below Software Version x.x.x Product Download: http://www.vbulletin.org/forum/showthread.php?t=270271 Homepage: d4tabase.com The exploit is caused due to a...

vBulletin 4.0.x SQL Injection Vulnerability

vBulletin version 4.0.x appears to suffer from a remote SQL injection vulnerability in the administrative functionality. Exploit Title: vBulletin force Read Thread 0day Authors: n3tw0rk Contact: Mail:email protected Product: 4.0.x Software Version x.x.x Product Download:...

vBulletin 4.0.2 - update_order SQL Injection

vBulletin 4.0.2 - updateorder SQL Injection source: https://www.securityfocus.com/bid/61449/info VBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to...

vBulletin 4.0.x SQL Injection

Exploit Title: vBulletin force Read Thread 0day Authors: n3tw0rk Contact: Mail:[email protected] Product: 4.0.x Software Version x.x.x Product Download: http://www.vbulletin.org/forum/showthread.php?t=241754&page=18 Google Dork: use your mind Homepage: d4tabase.com The exploit is caused due...

躺在床上读代码之 phpwind后台SQL注射

简要描述： 这个漏洞是一个后台注射，影响不大，本身我是不想发的，漏洞本身可能造成影响不大，但是整个漏洞分析的过程应该在自己还有兴趣的时候记录下来，因为以后我会知道当时还有兴趣分析了它。 PHPWIND是我一直以来觉得为了实现安全无所不用其极的一款产品，我是喜欢这样小聪明解决问题的产品的。 该产品使用checkVar函数全局将GP（GET,POST）中的.. db-query "DELETE FROM " . $this-tableName. " WHERE mid in ".$messageIds." " ; return $this-db-affectedrows ;...

Small-CMS 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications + Exploit title: Small-CMS 1.0 - SQL injection/Authentication Bypass + Date: 2/10/2012 + Author: Phizo + Vendor: http://www.small-cms.com/ + Version: 1.0 + Category: webapps + Google dork: intitle:"Find it yourself." + Tested on: Windows 7 |...

traq-2.3.5_CSRF_XSS_SQL_INjeCTION_vulns

==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capable of tracking issues for multiple...

Traq 2.3.5 CSRF / XSS / SQL Injection

==================================================================== Vulnerable Software: traq-2.3.5 Official Site: TraqProject.org ==================================================================== About Software: Traq is a PHP powered project manager, capable of tracking issues for multiple...

Traq admincp/common.php Remote Code Execution

This module exploits an arbitrary command execution vulnerability in Traq 2.0 to 2.3. It's in the admincp/common.php script. This function is called in each script located in the /admicp/ directory to make sure the user has admin rights. This is a broken authorization schema because the header...

Traq 2.3 - Authentication Bypass / Remote Code Execution

group'isadmin' 32. header"Location: login.php"; 33. This function is called in each script located into /admicp/ directory to make sure the user has admin rights, but this is a broken authorization schema due to the header function doesn't stop the execution flow. This can be exploited by malicio...

Zhuo Xun intelligent site management system EmteEasySite vulnerability 0day-vulnerability warning-the black bar safety net

| Zhuo Xun intelligent site management system ,official website:http://www. emte. com. cn/ Google:technical support:Zhuo information technology the default background:/main/login. asp //directly into the backstage to see the copyright is not EmteEasy system Exploit:the default address database ca...

vBSEO 3.5.2 & 3.2.2 - Persistent XSS via LinkBacks

Exploit for php platform in category web applications Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully supported solution. A full package of SEO enhancement...

vBSEO 3.2.2/3.5.2 - Persistent Cross-Site Scripting via LinkBacks

vBSEO - Persistent XSS via LinkBacks http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/ Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully support...

vBSEO 3.2.23.5.2 - Persistent Cross-Site Scripting via LinkBacks

vBSEO 3.2.23.5.2 - Persistent Cross-Site Scripting via LinkBacks vBSEO - Persistent XSS via LinkBacks http://www.exploit-db.com/vbseo-from-xss-to-reverse-php-shell/ Versions Affected: 3.5.2 & 3.2.2 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on t...

vbShout 5.2.2 Remote / Local File Inclusion

Title: vbShout 5.2.2 Remote/Local File Inlcusion Mod/Admin + Author: fred777 - fred777.5x.to + Link: http://www.dragonbyte-tech.com/vbecommerce.php?do=purchase&act=product&id=2 + Vuln: vbshout.php?do=path/fileNULL-Byte + Greetzz to: SceneCoderz + Contact: [email protected] + -- Vuln...

vbShout 5.2.2 - Local/Remote File Inclusion

Title: vbShout 5.2.2 Remote/Local File Inlcusion Mod/Admin + Author: fred777 - fred777.5x.to + Link: http://www.dragonbyte-tech.com/vbecommerce.php?do=purchase&act=product&id=2 + Vuln: vbshout.php?do=path/fileNULL-Byte + Greetzz to: SceneCoderz + Contact: [email protected] + -- Vuln...

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

No description provided by source. =============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian...

vBulletin 3.8.4 / 3.8.5 Registration Bypass

=============================================================== vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability =============================================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...

vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= vBulletin 3.8.4 & 3.8.5 Registration Bypass Vulnerability ========================================================= 010101010101010101010101010101010101010101010101010101010 0 0 1 Irani...

File Share scriptFile share - SQL Injection

File Share scriptFile share - SQL Injection ----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | |MouDy-Dz // 2o1o | ------------------------------------------------------------ Upload Shell...