Baran CMS 1.0 File Upload / SQL Injection / XSS

0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website : http://Aria-Security.Net Contact : [email protected] 0x02 Arbitrary ASP File Upload :...

Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation

Baran CMS 1.0 - Arbitrary .ASP File Upload File Disclosure SQL Injection Cross-Site Scripting Cookie Manipulation 0x01 Informations : Name : Baran Cms Version : 1.0 Personal site : http://www.baran-cms.ir $$ : 50$ Vul : Arbitrary ASP File Upload/DB/SQL/XSS/CM Credit : Aria-Security Team Website :...

DMXReady Blog Manager (SQL/XSS)

--------------------------------------------------------- Portal Name: DMXReady Blog Manager SQL/XSS Vendor : http://www.galaxyscripts.com Author : PouyaServer , [email protected] Aria-Security.Net Vulnerability : SQL/XSS --------------------------------------------------------- SQL:...

Silentum Boards Cross Site Scripting

--------------------------------------------------------- Portal Name: Silentum Boards Version : All version Vendor : http://hypersilence.net/silentumboards.php Author : PouyaServer , [email protected] Risk: Low Aria-security.net Vulnerability : XSS...

FaScript FaUpload SQL Injection

!!..:: ZAC003 ::..!! -+ Vive int Iranian WhiteHat Nomads Group +- ------------------------------------------------------------------------------------------- Reporter : ZAC003 From Aria-Security.Net Script Download :...

FaScript FaUpload - SQL Injection

FaScript FaUpload - SQL Injection !!..:: ZAC003 ::..!! -+ Vive int Iranian WhiteHat Nomads Group +- ------------------------------------------------------------------------------------------- Reporter : ZAC003 From Aria-Security.Net Script Download :...

FaScript FaUpload (download.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ FaScript FaUpload download.php SQL Injection Vulnerability ============================================================ !!..:: ZAC003 ::..!! -+ Vive int Iranian WhiteHat Nomads...

FaScript FaUpload - SQL Injection

!!..:: ZAC003 ::..!! -+ Vive int Iranian WhiteHat Nomads Group +- ------------------------------------------------------------------------------------------- Reporter : ZAC003 From Aria-Security.Net Script Download :...

saba-xss.txt

Saba 2.0 Cross Site Scripting JS Injection http://Aria-Security.com --------------------------------------------------------------- Saba 2.0 is a Persian Forum Script Dork: Powered by Saba 2.0 Vulnerable file: usercp.php usercp.php?username=YourUserName The above script can be inserted as Locatio...

NetClassifieds Sql Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- Greetz: Aura, imm02tal, Null, Kinglet, Mormoroth http://www.scriptdevelopers.net/ tested on NetClassifieds Original Post @...

Horde Webmail XSS [Aria-Security]

Aria-Security Team Persian Security Network http://Aria-Security.com & http://Aria-Security.net ---------------------------------------------------------- Greetz: AurA, imm02tal, Mormoroth ,NULL, Kinglet http://www.horde.org/...

hordemail-xss.txt

Aria-Security Team Persian Security Network http://Aria-Security.com & http://Aria-Security.net ---------------------------------------------------------- Greetz: AurA, imm02tal, Mormoroth ,NULL, Kinglet http://www.horde.org/...

5th avenue Shopping Cart SQL Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - category_id SQL Injection

5th Avenue Shopping Cart - categoryid SQL Injection Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

fifthave-sql.txt

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

5th Avenue Shopping Cart - 'category_id' SQL Injection

Aria-Security Team Persian Security Team http://Aria-Security.Net Persian http://Aria-Security.com ENG -------------------------------------------- 5th avenue Shopping Cart SQL Injection Greetz: AurA, Kinglet, NULL...

w2b.ru multiple products SQL Injection

------------------------------------------------------- | Aria-Security Team Persian Security Network | | http://Aria-Security.com For English | | http://Aria-Security.net For Farsi | | Greetz: | | AurA, NULL, Kinglet, t3rr0r1st, Moromort | | and to all of our staff | | Discovered by The-0utl4w |...

w2b-sql.txt

------------------------------------------------------- | Aria-Security Team Persian Security Network | | http://Aria-Security.com For English | | http://Aria-Security.net For Farsi | | Greetz: | | AurA, NULL, Kinglet, t3rr0r1st, Moromort | | and to all of our staff | | Discovered by The-0utl4w |...

Joomla Component com_lms SQL Injection

Aria-Security Team Persian Security Network http://aria-security.net ---------------------------------- Joomla Component comlms SQL Injection Greetz: AurA, Mormoroth, Null, t3rr0r1st Discovered by The-0utl4w Vendor: joomlashowroom.com/ Original Advisory:...

Mambo/joomla com_intellect "page" LFI [Aria-Security]

Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...