secure.bhg.com XSS vulnerability

Open Bug Bounty ID: OBB-164863 Description| Value ---|--- Affected Website:| secure.bhg.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Soco CMS Local File Include Vulnerability

No description provided by source. Exploit Title: Soco CMS Local File Include Google Dork: Powered by Soco Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

Web Wiz NewsPad Express Edition 1.03 Database File Disclosure Vulnerability

No description provided by source. ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/2010 Author: keracker Software...

MARINET CMS (room.php) <= Blind SQL Vulnerability

No description provided by source. ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Cente...

Site2Host.com SQL Injection

site2host Web Design Sql Injection Vulnerability Exploit Title : site2host Web Design Sql Injection Vulnerability Google Dork: inurl:Site Designed by Site2host.com vender : http://site2host.com/ Author: BHG Security Center Home: http://cc.black-hg.org/ - http://greyh4t.com/cc/ Tested on:...

Poweradmin Cross Site Scripting

poweradmin Cross Site Scripting Exploit Title :poweradmin Cross Site Scripting Google Dork: "a completer poweradmin - credits" 0r "poweradmin - credits" Author: BHG Security Center Home: http://cc.black-hg.org - http://greyh4t.com/cc/ Tested on: linux+apache Finders:Siavash [email protected]...

Mambo / Joomla FCKEditor Local File Inclusion

mambo /joomla fckeditor lfi Vulnerability Exploit Title :mambo /joomla fckeditor lfi Vulnerability Google Dork: /mambots/editors/fckeditor/editor/filemanager/browser/default Author: BHG Security Center Home: http://cc.black-hg.org - http://greyh4t.com/cc/ Tested on: linux+apache Finders:Siavash...

MyChipTime CMS Cross Site Scripting

Exploit Title : MyChipTime Cms Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://mychiptime.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu -...

Booklight SQL Injection

Exploit Title: Booklight SQL Injection Vulnerabilities Google Dork: "by Booklight Inc" Date: 2012/04/29 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite : black-hg.org Software Link: http://booklightinc.com/ Version: Last Version Security Risk::High Tested...

WordPress WPsc-MijnPress Cross Site Scripting

Exploit Title : Wordpress WPsc-MijnPress plugin Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://wordpress.org/extend/plugins/wpsc-mijnpress/ Security Risk : High Versio...

vBulletin 4.1.10 Local File Inclusion

Exploit Title : Vbulletin 4.1.10 functionscron.php Local file Include Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://vbulletin.com Security Risk : High Version : All Version Tested on :...

Soco CMS - Local File Inclusion

Exploit Title: Soco CMS Local File Include Google Dork: "Powered by Soco" Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

Soco CMS - Local File Inclusion

Soco CMS - Local File Inclusion Exploit Title: Soco CMS Local File Include Google Dork: "Powered by Soco" Date: 28/04/2012 Author: BHG Security Center H0me : www.black-hg.org Software Link: http://hentan.eu/php/Soco/ Version: last version Tested on: Linux/Ubuntu - Windows7 p0c :...

C4kurdGroup CMS SQL Injection

Exploit Title: C4kurdGroup CMS SQL injection Vulnerability Date: 2012-04-14 GMT +7 Author: BHG Security Center Software Link: http://www.c4kurd.com/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Created by C4kurdGroup " Version : Full Version Tested on: ubuntu 11.04 CVE : -...

CenterSite CMS Cross Site Scripting

Exploit Title : CenterSite Cms Cross-Site Scripting Vulnerabilitiy Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://www.centersite.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubunt...

DAPH CMS Shell Upload

Exploit Title: DAPH CMS Remote File Upload RFU Vulnerability Date: 2012-02-04 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.daph.gov.lk/ Dork: inurl:Animal Production and Health DAPH Tested on: ubuntu 11.04 CVE : -...

Anfibia Remote Command Execution

Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...

Joomla Currency Converter Cross Site Scripting

Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...

VebTek CMS LFD Vulnerability

Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...

Unfixed XSS vulnerability at yahooaction.com

Security researcher BHG Security Center, has submitted on 19/01/2012 a cross-site-scripting XSS vulnerability affecting yahooaction.com, which at the time of submission ranked 510052 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. I...