LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...

CU Village CMS Site 1.0 (print_view) Blind SQL Injection Vulnerability

No description provided by source...

Pc4Uploader 9.0 - Remote Blind SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| ow, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait PEACE =Vuln: pc4arb - pc4 Uploader = 9.0 Blind SQL injection =INFO: http://pc4arb.com/product-13.html =BUY: http://pc4arb.com/deal-13.html =DORK: intext:Powered by...

Oxygen2PHP <= 1.1.3 (post.php) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day Oxygen2PHP = 1.1.3 post.php Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use strict; use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; use IO::Socket; my...

Portel 2008 - (decide.php patron) Blind SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------ Portel patron Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email :...

Joomla Component com_kk Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+...

Morcego CMS <= 1.7.6 - Remote Blind SQL Injection Exploit

No description provided by source. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , / / // / , / / / + - ,/,// //||/ ///||// - + // + - - +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ?php function...

XOOPS Module resmanager <= 1.21 - Blind SQL Injection Exploit

No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...

JAKCMS <= 2.01 - Code Execution Exploit

No description provided by source. !/usr/bin/python JAKCMS = v2.01 Code Execution Exploit Explanation: During the authentication process, a check is performed to ensure that the user accessing the page is not already logged in. This process is done by validating the cookies set in the browser as...

Goople <= 1.8.2 (frontpage.php) Blind SQL Injection Exploit

No description provided by source. --+++=========================================================+++-- --+++====== Goople = 1.8.2 Blind SQL Injection Exploit ======+++-- --+++=========================================================+++-- !/usr/bin/php ? function usage echo \n+ Goople = 1.8.2 Blin...

Ez Album Blind SQL Injection Vulnerability

No description provided by source. Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Church Edit - Blind SQL Injection

No description provided by source. Exploit Title: Church Edit Blind SQL Injection Google Dork: inurl:This website is powered by Church Edit Date: 15/3/2013 Exploit Author: ThatIcyChill Vendor Homepage: http://www.churchedit.co.uk/ Version: Initial Release...

xt:Commerce <= 3.04 SP2.1 - Time Based Blind SQL Injection

No description provided by source. +---------------------------------+ | xt:Commerce = v3.04 SP2.1 | | commerce:SEO = v2.1 CE | | Gambio = v2.0.10 SP1.4 | | Time Based Blind SQL Injection | +---------------------------------+ Author.............: Ralf Zimmermann Mail...............:...

phpmychat plus 1.93 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------ Software................phpMyChat Plus 1.93 Vulnerability...........Blind SQL Injection Threat Level............Serious 3/5 Download................http://sourceforge.net/projects/phpmychat...

phpmychat plus 1.94 rc1 - Multiple Vulnerabilities

No description provided by source. Exploit Title: phpMyChat Plus v1.94 RC1 Multiple Remote Vulnerabilities Date: 04/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://sourceforge.net/projects/phpmychat/ Software Link:...

nullam blog 0.1.2 (lfi/fd/sql/xss) Multiple Vulnerabilities

No description provided by source. -- Salvatore Fresta aka drosophila CWNP444351 Salvatore drosophila Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS +...

Webmobo WB News System Blind SQL Injection

No description provided by source. Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page:...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

No description provided by source. Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

Star Articles 6.0 - Remote Blind SQL Injection Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + stararticles blind sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...

Contrexx Shopsystem <= 2.2 SP3 (catId) - Blind SQL Injection

No description provided by source. !/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount...