Affiliate MLM Script 1.0 - product-category.php?key SQL Injection

Affiliate MLM Script 1.0 - product-category.php?key SQL Injection Exploit Title: Affiliate MLM Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/affiliate-mlm-script/ Demo:...

Advance B2B Script 2.1.3 - 'show_id' / 'pid' SQL Injection

Exploit Title: Advance B2B Script 2.1.3 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advance-b2b-script/ Demo: http://198.38.86.159/advancedb2b/ Version: 2.1.3 Category: Webapps Tested on:...

FS Trademe Clone 1.0 - search id SQL Injection

FS Trademe Clone 1.0 - search id SQL Injection Exploit Title: FS Trademe Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/trademe-clone/ Demo: http://trademe-clone.demonstration.co.in/ Version: 1.0...

FS Foodpanda Clone 1.0 - SQL Injection

FS Foodpanda Clone 1.0 - SQL Injection...

Co-work Space Search Script 1.0 - 'city' SQL Injection

Exploit Title: Co-work Space Search Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/co-work-space-search-script/ Demo: http://ordermanagementscript.com/demo/co-work-space/ Version: 1.0...

FS Stackoverflow Clone 1.0 - keywords SQL Injection

FS Stackoverflow Clone 1.0 - keywords SQL Injection Ver Ayari...

FS Monster Clone 1.0 - 'Employer_Details.php?id' SQL Injection

Exploit Title: FS Monster Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/monster-clone/ Demo: http://monster-clone.demonstration.co.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx...

FS Olx Clone 1.0 - scat pid SQL Injection

FS Olx Clone 1.0 - scat pid SQL Injection Exploit Title: FS Olx Clone 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://fortunescripts.com/ Software Link: https://fortunescripts.com/product/olx-clone/ Demo: http://olx-clone.demonstration.co.in/ Version: 1.0 Category: Webapps...

Techno Portfolio Management Panel - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Techno - Portfolio Management Panel 1.0 - SQL Injection Vendor Homepage: https://codecanyon.net/user/engtechno Software Link: https://codecanyon.net/item/techno-portfolio-management-panel/20919551 Demo: http://dacy.esy.es/eng/...

Gemirro Stored XSS in Gemspec "homepage" value

Stored cross-site scripting XSS vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file. A ".gemspec" file must be created with a JavaScript URL in the homepage value. This can be used to bui...

GHSA-X7P2-X2J6-MWHR Gemirro Stored XSS in Gemspec "homepage" value

Stored cross-site scripting XSS vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file. A ".gemspec" file must be created with a JavaScript URL in the homepage value. This can be used to bui...

JVN#05398317: WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references

The WordPress plugin "TablePress" is a plugin to create and manage tables on WordPress site. TablePress contains a vulnerability where XML external entity XXE references are not properly restricted CWE-611. Impact An arbitrary file on the server may be accessed by users who can access the...

Web Viewer 1.0.0.193 (Samsung SRN-1670D) File Upload

Exploit Title: Unrestricted file upload vulnerability - Web Viewer 1.0.0.193 on Samsung SRN-1670D Date: 2017-06-19 Exploit Author: Omar MEZRAG - 0xFFFFFF / www.realistic-security.com Vendor Homepage: https://www.hanwhasecurity.com Version: Web Viewer 1.0.0.193 on Samsung SRN-1670D Tested on: Web...

Ulterius Server < 1.9.5.0 - Directory Traversal

Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link: https://github.com/Ulterius/server/tree/0e4f2113da287aac88a8b4c5f8364a03685d393d Version: 1.9.5.0 Tested on: Windows...

Sera 1.2 Local Root / Password Disclosure

Sera is a free app for mac and iOS that lets you unlock your mac automatically when your iphone is within a configured proximity. Unfortunately to facilitate this it stores the users login password in their home directory at: /Library/Preferences/no.ignitum.SeraOSX.plist This makes root privilege...

WhatsApp 2.17.52 - Memory Corruption Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...

Article Directory Script SQL Injection Vulnerability

Article Directory Script is a script for creating article directories in websites. A SQL injection vulnerability exists in Article Directory Script version 3.0. A remote attacker can exploit this vulnerability by sending the 'id' parameter to the author.php or category.php file to inject SQL...

Sokial Social Network Script 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sokial Social Network Script 1.0 - SQL Injection Vendor Homepage: http://www.sokial.net/ Software http://www.sokial.net/demonstrations-social-network.sk Demo: http://demo.sokial.net/ Version: 1.0 Category: Webapps Tested on:...

Basic B2B Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Basic B2B Script - SQL Injection Dork: N/A Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/nC3F4570353/php-scripts/basic-b2b-script Demo:...

MyBuilder Clone 1.0 - subcategory SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBuilder Clone 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://www.contractorscripts.com/ Software Link: http://order.contractorscripts.com/ Demo: http://demo.contractorscripts.com/ Version: 1.0 Category:...