Ferdows CMS Pro <=1.1.0 Multiple Vulnerabilities

Exploit for asp platform in category web applications www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm...

Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities

Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix:...

Ferdows CMS Pro 1.1.0 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix: N/A 1. Description: Ferdows CMS is a complete,...

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using $usercount for the boolean condition checking :...

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...

Acikportal Blind SQL Injection

=========================================================== turkish © ACIKPORTAL blind SQL Injection Vulnerability ----------------------------------------------------------- foun by :kurd-team group : kurdish hackers team contact : [email protected] site : kurdteam.org...

Uniscan 4.0 vulnerability scanner Released

Uniscan 4.0 vulnerability scanner Released The Uniscan vulnerability scanner is aimed at information security, which aims at finding vulnerabilities in Web systems and is licensed under the GNU GENERAL PUBLIC LICENSE 3.0 GPL 3. The Uniscan was developed using the Perl programming language to be...

Uniscan 4.0 vulnerability scanner Released

Uniscan 4.0 vulnerability scanner Released The Uniscan vulnerability scanner is aimed at information security, which aims at finding vulnerabilities in Web systems and is licensed under the GNU GENERAL PUBLIC LICENSE 3.0 GPL 3. The Uniscan was developed using the Perl programming language to be...

Built2Go Shopping Blind SQL Injection

Exploit Title: Built2Go Shopping E-Commerce System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: search.php product.php Example:...

Contrexx Shopsystem 2.2 SP3 Blind SQL Injection

!/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount 700 CHF Vendor:...

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection !/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04...

Contrexx ShopSystem 2.2 SP3 - 'catId' Blind SQL Injection

!/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Software price: abount 700 CHF Vendor:...

Asterisk2Billing v1.9.4 - Blind SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - Blind SQL Injection Vulnerability Release Date: ============= 2011-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 250 Product & Service Introduction: =============================== Asterisk ist eine freie...

Asterisk2Billing v1.9.4 - Blind SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - Blind SQL Injection Vulnerability Release Date: ============= 2011-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 250 Product & Service Introduction: =============================== Asterisk ist eine freie...

GMX Service Center - Blind SQL Injection Vulnerability

Document Title: =============== GMX Service Center - Blind SQL Injection Vulnerability Release Date: ============= 2011-08-16 Vulnerability Laboratory ID VL-ID: ==================================== 150 Product & Service Introduction: =============================== Das Internet ist Kommunikation ...

Miscode Blind SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: = [email protected] !/usr/bin/php...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: =...

Contrexx Shopsystem <= 2.2 SP3 Blind SQL Injection (2 exploits)

Exploit for php platform in category web applications Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version:...

Allomani Songs & Clips 2.x (msg_id) Blind SQL Injection Exploit

Exploit for php platform in category web applications ?php / =============================================================== Allomani Songs & Clips 2.x msgid Blind SQL Injection Exploit =============================================================== +Version : 2.x +Author : ahwak2000 +home :...