microASP (Portal+) CMS SQL Injection

Sql Injection on microASP Portal+ CMS + Date: 05/05/2019 + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.microasp.it/ + Contact: [email protected] + Tested on: Windows 7 and Gnu/Linux + Dork: inurl:"/pagina.phtml?explodetree" // use your...

PHPads 2.0 - (click.php3?bannerID) SQL Injection Vulnerability

Exploit for php platform in category web applications + Sql Injection on PHPads Version 2.0 based on Pixelledads 1.0 by Nile Flores + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: https://blondish.net/ + Software Demo :...

microASP (Portal+) CMS - (pagina.phtml?explode_tree) SQL Injection Vulnerability

Exploit for asp platform in category web applications + Sql Injection on microASP Portal+ CMS + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.microasp.it/ + Contact: email protected + Tested on: Windows 7 and Gnu/Linux + Dork:...

PHPads 2.0 - 'click.php3?bannerID' SQL Injection

Sql Injection on PHPads Version 2.0 based on Pixelledads 1.0 by Nile Flores + Date: 05/05/2019 + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: https://blondish.net/ + Software Demo : https://github.com/blondishnet/PHPads/blob/master/readme.txt + Contact:...

Joomla Content 3.x SQL Injection

Exploit Title : Joomla Content Components 3.x SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/02/2019 Vendor Homepage : joomla.org Software Download Links : github.com/asika32764/joomla-cmf/tree/master/administrator/components/comcontent...

Joomla Alberghi 2.1.3 File Upload / SQL Injection

Exploit Title : Joomla Alberghi Components 2.1.3 SQL Injection / Remote File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 27/02/2019 Vendor Homepage : alberghi.joomlaitalia.com Software Download Links : alberghi.joomlaitalia.com/files/alberghi213SR.zip...

Joomla Contact Enhanced 3.9.2 SQL Injection

Exploit Title : Joomla Contact Enhanced Components 3.9.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : idealextensions.com Software Information Link : extensions.joomla.org/extension/contact-enhanced-component/...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

Exploit Title : Joomla Furniture Virtuemart Templates 1.5 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : ordasoft.com Software Download Link : ordasoft.com/download-furniture-joomla-virtuemart-template Software...

Joomla ChronoForms 6.0.17 SQL Injection

Exploit Title : Joomla ChronoForms Components 6.0.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 26/02/2019 Vendor Homepage : chronoengine.com Software Download Link : chronoengine.com/chronoforms Software Information Link :...

Joomla SpiderCalendar 3.2.17 SQL Injection

Exploit Title : Joomla SpiderCalendar Components 3.2.17 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : web-dorado.com Software Download Link : web-dorado.com/products/joomla-calendar.html Software Information Link :...

Joomla Geommunity3es 1.4 SQL Injection

Exploit Title : Joomla Geommunity3es Components 1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : nordmograph.com Software Download Link : nordmograph.com/extensions /index.php?option=comvirtuemart&view=productdetails...

Joomla Matukio Events 7.0.15 SQL Injection

Exploit Title : Joomla Matukio Events Components 7.0.15 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/02/2019 Vendor Homepage : compojoom.com Software Download Link : matukio.compojoom.com Software Information Link :...

Typo3 CMS Modern Guestbook tx_veguestbook_pi1 3.3.0 SQL Injection

Exploit Title : Typo3 CMS Modern Guestbook txveguestbookpi1 3.3.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/02/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/veguestbook/3.3.0/zip/ Softwar...

Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 8.0.39 SQL Injection

Exploit Title : Typo3 CMS BrowserMaps Leaflet Tutorial txbrowserpi1 8.0.39 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/02/2019 Vendor Homepage : typo3-organiser.de typo3.org Software Download Links :...

Typo3 CMS T3 EasyEvent tx_easyevent_pi1 0.37.3 SQL Injection

Exploit Title : Typo3 CMS T3 EasyEvent txeasyeventpi1 0.37.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/02/2019 Vendor Homepage : typo3.org Software Download Link : github.com/dwenzel/t3events/archive/master.zip...

Typo3 CMS Commerce DAM connector tx_commerce_pi1 0.1.0 SQL Injection

Exploit Title : Typo3 CMS Commerce DAM connector txcommercepi1 0.1.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 18/02/2019 Vendor Homepage : opencontent.org typo3.org Software Information Links : forge.typo3.org/projects/extension-damcommerce...

Joomla VirtueMart 3.4.1 SQL Injection

Exploit Title : Joomla VirtueMart 3.4.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : virtuemart.net Software Download Link : virtuemart.net/downloads Software Information Link :...

Joomla DatsoGallery 3.4.4 SQL Injection

Exploit Title : Joomla DatsoGallery Components 3.4.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : datso.fr Software Download Link : datso.fr/products.html Software Information Link :...

Joomla PhocaMaps 3.0.5 Database Disclosure / SQL Injection

Exploit Title : Joomla PhocaMaps 3.0.5 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phoca.cz/phocamaps Software Download Link : phoca.cz/download/category/38-phoca-maps-plugin Software Informati...

BizPotential EasyWebTime 8.6.2 Bypass / SQL Injection

Exploit Title : BizPotential EasyWebTime 8.6.2 SQL Injection / Bypass Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : bizpotential.com ewtadmin.com Software Information Link : bizpotential.com/overview.php Software Affected Version :...