WordPress Plugin wp-autoyoutube - Blind SQL Injection

Exploit Title: WordPress wp-autoyoutube plugin Blind SQL Injection Vulnerability Date: 2012-11-01 Author: longrifle0x software: Wordpress Download:http://wordpress.org/extend/plugins/wp-autoyoutube/ Tools: SQLMAP DESCRIPTION Discovered a vulnerability in wp-autoyoutube, Wordpress Plugin,...

Wordpress plugin Pay With a Tweet <= 1.1 a plurality of defect and repair-vulnerability warning-the black bar safety net

Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Author: Gianluca Brindisi gATbrindi. si @gbrindisi http://brindi.si/g/ Download address: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Affect version: 1.1 1 Blind SQL Injection in shortcode: Short code parameter...

EasyWebRealEstate blind defect and repair-vulnerability warning-the black bar safety net

Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team farbodmahini badguest. cnwww. badguest. cn WwW.H4ckCity.Org Software address: www.easywebrealestate.com Affects all version: All Version Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Example...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities

WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...

CommonSense CMS Blind SQL Injection

Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on:...

Mediashaker blind defect and repair-vulnerability warning-the black bar safety net

Title: Mediashaker Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team www.badguest.cnWwW.H4ckCity.Org Affect all versions Developer: http://www.mediashaker.com/ Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Sample test http://www.badguest.cn /content. php? id=1 Blind S...

Posse Softball Director CMS SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor: easy laster + Vulnerabilities Blind SQL Injection + Page:...

EasyWebRealEstate Blind SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Google Dork: inurl:listings.php "Powered by EasyWebRealEstate" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

Base Content Management System Lennox Industries - Blind SQL Injection

Exploit for php platform in category web applications Base Content Management System Lennox Industries - Blind SQL Injection Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : email protected Found : 04 January 2012 - 08:45 PM. Tested On : Back|Track 5. Auto-Tools : SQL...

Mediashaker Blind SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Mediashaker Blind SQL Injection Vulnerabilitiy Google Dork: inurl:content.php "Powered by Mediashaker" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version...

Posse Softball Director CMS - team.php Blind SQL Injection

Posse Softball Director CMS - team.php Blind SQL Injection .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor:...

Posse Softball Director CMS (team.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor: easy...

Posse Softball Director CMS - 'team.php' Blind SQL Injection

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. Posse Softball Director CMS Blind SQL Injection Vulnerability team.php .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-=--=-=--=-. + Autor: easy laster + Vulnerabilities Blind SQL Injection + Page:...

CertificationMagazine - Blind SQL Injection Vulnerability

Document Title: =============== CertificationMagazine - Blind SQL Injection Vulnerability Release Date: ============= 2011-12-18 Vulnerability Laboratory ID VL-ID: ==================================== 269 Product & Service Introduction: =============================== Certification Magazine is a...

Xoops 2.5.4 blind and fix-vulnerability warning-the black bar safety net

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Download address: Author: blkhtc0rp www.badguest.cn blkhtc0rpatyahoodotcom Test platform: Freebsd 8 and Debian Squeeze Comment: In order to be successful an attacker must have...

DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection

Title ----- DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection Severity -------- High Date Discovered --------------- November 18, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: sxkeebler and r@b13$ Vulnerability Description...

Xoops 2.5.4 Blind SQL Injection Vulnerability

No description provided by source. Dork: "Powered by XOOPS 2.5.4" Download: http://sourceforge.net/projects/xoops/ Date: 10/12/2011 Author: blkhtc0rp Mail: blkhtc0rpatyahoodotcom Tested on: Freebsd 8 and Debian Squeeze Note: In order to be successful an attacker must have permission to access the...

WordPress UPM-POLLS 1.0.4 Blind SQL Injection

Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress 3.2.1,Firefox 4, XAMPP Info: Best Plugin to create Polls for yo...

WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection

WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection Exploit Title: BLIND SQL injection UPM-POLLS wordpress plugin 1.0.4 Google Dork: n/a Date: 04-12-2011 Author: Saif El-Sherei Software Link: http://downloads.wordpress.org/plugin/upm-polls.1.0.4.zip Version: 1.0.4 Tested on: wordpress...