actionlabs.com.ph XSS vulnerability

Vulnerable URL: http://actionlabs.com.ph/adminpanel/ Details: Description| Value ---|--- Patched:| Yes, at 07.02.2017 Latest check for patch:| 07.02.2017 15:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 11368014 VIP website status:| No Check actionlabs.com....

WordPress LeagueManager Plugin 3.8 - SQL Injection

No description provided by source. !/usr/bin/ruby Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection Google Dork: inurl:/wp-content/plugins/leaguemanager/ Date: 13/03/13 Exploit Author: Joshua Reynolds Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/ Software Link...

Php AdminPanel Free version 1.0.5 - Remote File Disclosure Vuln

No description provided by source. Php AdminPanel Free version 1.0.5 Remote File Disclosure AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina...

Hloun Support Management System 3.0 SQL Injection / Bypass

Hloun Support Management System version 3.0 suffers from authentication bypass and remote SQL injection vulnerabilities. fixhashuser$COOKIE'onlineadmin'; $userquery = "SELECT FROM member WHERE username='".$memberhash'username'."' AND password='".$memberhash'password'."'"; $member =...

WordPress LeagueManager Plugin 3.8 - SQL Injection

Exploit for php platform in category web applications Description: An SQL Injection vulnerability exists in the leagueid parameter of a function call made by the leaguemanagerexport page. This request is processed within the leaguemanager.php: if isset$POST'leaguemanagerexport'...

CVE-2012-6047

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

CVE-2012-6047

CVE-2012-6047 is a CSRF vulnerability in X7 Chat

PT-2012-6238

Name of the Vulnerable Software and Affected Versions X7 Chat versions 2.0.5.1 and earlier Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the "users page" in an "adminpane...

CVE-2012-6047: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in X7 Chat 2.0.5.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that add a user to an arbitrary group via the users page in an adminpanel action to index.php...

CLscript CMS v3.0 - Multiple Web Vulnerabilities

Document Title: =============== CLscript CMS v3.0 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=574 Release Date: ============= 2012-05-15 Vulnerability Laboratory ID VL-ID: ==================================== 574 Common...

PCVmedia SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PCVmedia freegallery.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.pcvmedia.com/ Persian Gulf 4 Ever! Dork : "Website designed & developed by PCVmedia.com"...

Easy Media Script SQL Injection Vulnerability

Exploit for php platform in category web applications alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script - SQL Injection

Easy Media Script - SQL Injection alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

Easy Media Script - SQL Injection

alert0 -== Start ==- "; $t=array"dbuser "="user","dbversion"="version","dbname "="database", "UserName "="user","Password "="pass"; foreach$t as $r=$y...

QualDev eCommerce SQL Injection

==================================================== QualDev eCommerce script SQL injection vulnerability ==================================================== Exploit Title: QualDev eCommerce script SQL injection vulnerability Vendor: http://www.qualdev.com Date: 15.12.2010 Version: all version...

Display event CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================= Display event CMS SQL Injection Vulnerability ============================================= + Auth0r : Game Over + E-m41L : gameover20atlivedotcom + D0rk : inurl:index.php?action=cms.display + S-Si...

phpBazar Administrative Disclosure

===================================== phpBazar admin path discloser Vulnerability ===================================== Author :: NetSpy Group :: Aras cyber Army Email :: [email protected] Discover :: 1 july 2010 Critical Lvl :: M Publised :: 22 june 2010 vender :: n/a...

ClipBucket AdminPanel edit site Vulnerability

============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world ! 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' ...

ClipBucket AdminPanel edit site Vulnerability

Exploit for php platform in category web applications ============================================= ClipBucket AdminPanel edit site Vulnerability ============================================= The largest Exploit Database in the world !...

CVE-2009-4793

The CVE-2009-4793 issue affects BandSite CMS 1.1.4, specifically the adminpanel/scripts/addphotos.php functionality. Unrestricted file upload in the addphotos action of adminpanel/index.php allows remote authenticated administrators to upload a file with an executable extension and then access it...