Acidcat CMS v 3.3 (fckeditor) Shell Upload Vulnerability

Exploit for asp platform in category web applications ======================================================== Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ======================================================== » Title : Acidcat CMS v 3.x fckeditor Shell Upload Vulnerability » Scrip...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

KING CMS V5 IIS parsing vulnerability-vulnerability warning-the black bar safety net

The default www.xx.com/admin/system/editor/FCKeditorboyisx/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=/o. asp&NewFolderName=o. asp Jus create a folder with the burst path...

Acidcat CMS 3.3 - FCKeditor Arbitrary File Upload

Acidcat CMS 3.3 - FCKeditor Arbitrary File Upload ============================================================================== » Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ============================================================================== » Title : Acidcat CMS v 3.x...

Acidcat CMS 3.3 - 'FCKeditor' Arbitrary File Upload

============================================================================== » Acidcat CMS v 3.3 fckeditor Shell Upload Vulnerability ============================================================================== » Title : Acidcat CMS v 3.x fckeditor Shell Upload Vulnerability » Script :...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Vulnerability in Microsoft IIS Allows Malicious File Uploads

A vulnerability has been identified in Microsoft Internet Information Services IIS that causes the server to incorrectly handle files with multiple extensions separated by the “;” character. For instance, a file named “malicious.asp;.jpg” is treated as an ASP file. This flaw allows attackers to...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Diggersolutions Newsletter 2.7.1 SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, gunslinger, Th3 RDX. Greetz to :...

Site2nite Businesses For Sale Listings SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Businesses For Sale Listings SQL injection Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe, Th3 RDX. Greetz...

Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass

Exploit for asp platform in category web applications ===================================================================== Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass =====================================================================...

Diggersolutions Newsletter SQL injection Vulnerability

Exploit for asp platform in category web applications ====================================================== Diggersolutions Newsletter SQL injection Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1...

Onlinetechtools OWOS: Professional Edition SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Onlinetechtools OWOS: Professional Edition Authentication Bypass Vulnerability Version:2.10 Price:900$ Vendor url:http://www.onlinetechtools.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Soni...

Comriesoftware Pay Roll Time Sheet And Punch Card SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com...

Onlinetechtools OWOS: Professional Edition Authentication Bypass

Exploit for asp platform in category web applications ================================================================ Onlinetechtools OWOS: Professional Edition Authentication Bypass ================================================================...

Online Work Order System (OWOS) Professional Edition - Authentication Bypass

Online Work Order System OWOS Professional Edition - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Onlinetechtools OWOS: Professional Edition? Authentication Bypass Vulnerability Version:2.10 Price:900$ Vendor url:http://www.onlinetechtools.com Published...

Digger Solutions NewsLetter Open Source - SQL Injection

Digger Solutions NewsLetter Open Source - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Diggersolutions Newsletter SQL injection Vulnerability Version:2.7.1 Vendor url:http://diggersolutions.com Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects,...

Site2Nite Business eListings - SQL Injection

Site2Nite Business eListings - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Businesses For Sale Listings SQL injection Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur...