phptpoint Hospital Management System 1.0 - 'user' SQL injection

Exploit Title: phptpoint Hospital Management System 1.0 - 'user' SQL injection Date: 2018-10-24 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.phptpoint.com/ Software Link: Version: 1 Tested on: WAMP windows 10 x64 CVE: unknown Description: Phptpoin...

info-algerie.com XSS vulnerability

Open Bug Bounty ID: OBB-573380 Description| Value ---|--- Affected Website:| info-algerie.com Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO...

WordPress WP-Contact-Widgets 1.4.1 Cross Site Scripting Vulnerability

WordPress WP-Contact-Widgets plugin version 1.4.1 suffers from a stored cross site scripting vulnerability. Exploit Title: Stored XSS on wp-contact-widgets 1.4.1 wordpress plugin Exploit Author: Boumediene KADDOUR Publisher: R&D Unit Algerie Telecom Version: 1.4.1 Application website:...

Exclusive: More than 200,000 Algerian TP-LINK Routers are vulnerable to Hackers

More than 15.2% of the Algerian population use Internet service which is provided by around 30 Internet Service Providers and one of the largest shares is served by Algerie Telecom. Algerie Telecom provides TP-LINK TD-W8951ND Router to most of their home customers who Opt-In for Internet services...

Skybluecanvas.v1.1-r248 CSRF vulnirabilities

Exploit for php platform in category web applications ============================================ Skybluecanvas.v1.1-r248 CSRF vulnirabilities ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

An image Gallery 1.0 - 'navigation.php' Local Directory Traversal

------------------------------------------------------------------------- An image gallery 1.0navigation.php Local Directory Traversal ------------------------------------------------------------------------- Author : ThE g0bL!N Download :...

MRCGIGUY Hot Links - 'report.php?id' SQL Injection

MRCGIGUY Hot Links SQL PHP report.php id Remote SQL Injection Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://www.mrcgiguy.com Special Thx: All Muslims All Members Of Team Algerien Of FootBall Note: Algerie 3-1 Egypt Exploit: ------ SQL INJECTION: -------------...

My Dealer CMS 2.0 - Authentication Bypass

My Dealer CMS 2.0 - Authentication Bypass ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.co...

Simbas CMS 2.0 SQL Injection

----------------------------------------------------- ----------------------------------------------------- Simbas Content Management System auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

Simbas CMS 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Simbas CMS 2.0 Auth Bypass SQL Injection Vulnerability ======================================================== ----------------------------------------------------- Simbas Content...

My Dealer CMS 2.0 SQL Injection

----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...