Cart Engine 3.0.0 Database Backup Disclosure Exploit

Summary Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of Cart Engine include: CMS engine based on our qEngine, product options, custom fields, digital products, search engine friendly URL, user...

Cart Engine 3.0.0 Database Backup Disclosure

?php / Cart Engine 3.0.0 Database Backup Disclosure Exploit Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features of...

qEngine CMS 6.0.0 Database Backup Disclosure Vulnerability

qEngine CMS version 6.0.0 suffers from a database backup disclosure vulnerability. $total return;...

Kemana Directory 1.5.6 - Database Backup Disclosure

Kemana Directory 1.5.6 - Database Backup Disclosure $total return; ifempty$starttime $starttime=time; $now = time...

qEngine CMS 6.0.0 Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$d...

qEngine CMS 6.0.0 Database Backup Disclosure Exploit

Summary qEngine qE is a lightweight, fast, yet feature packed CMS script to help you building your site quickly. Using template engine to separate the php codes from the design, you don't need to touch the codes to design your web site. qE is also expandable by using modules. Description qEngine...

Kemana Directory 1.5.6 - Database Backup Disclosure

$total return; ifempty$starttime $starttime=time; $now = time; $perc=double$done/$total; $bar=floor$pe...

ThinkSAAS逻辑漏洞可致拖库

简要描述： ThinkSAAS的一个逻辑漏洞导致可以实时备份网站数据库，同时可以获取备份数据库文件名。 下载实时备份的数据库实现脱裤。漏洞影响所有版本。 详细说明： thinksaas系统使用常量INTS来控制页面的访问，然后在每个功能模块用一句代码： defined'INTS' or die'Access Denied.'; 来限制访问，这样设计带来的问题是，一个文件包含可以通杀，越权访问执行任意功能模块。 看到/app/user/action/plugin.php代码： fetchallassoc"SHOW TABLES"; foreach$arrTables as $key=$it...

WordPress Better WP Security 3.6.3 XSS / Disclosure

Exploit Title: Wordpress Plugin - Better WP Security multiple vulnerability Date: 2014 11 Fabruary Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: https://wordpress.org/plugins/better-wp-security/ Tested on: Lin...

CVE-2014-1637

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backupray2.php, which allows remote attackers to download a database backup via a direct request...

CVE-2014-1637

CVE-2014-1637 affects Command School Student Management System 1.06.01. The issue is an improper access restriction on sw/backup/backup_ray2.php, allowing remote attackers to download a database backup via a direct request. Public exposure is indicated by referenced exploit information (Exploit-D...

CVE-2014-1637

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backupray2.php, which allows remote attackers to download a database backup via a direct request...

CVE-2014-1637: Exposure of Sensitive Information to an Unauthorized Actor

Command School Student Management System 1.06.01 does not properly restrict access to sw/backup/backupray2.php, which allows remote attackers to download a database backup via a direct request...

Dredge School Administration System - DSMBackupprocessbackup.php Database Backup Information Disclosure

Dredge School Administration System - DSMBackupprocessbackup.php Database Backup Information Disclosure source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site...

Dredge School Administration System - '/DSM/Backup/processbackup.php' Database Backup Information Disclosure

source: https://www.securityfocus.com/bid/64720/info Dredge School Administration System is prone to the following security vulnerabilities: 1. An SQL-injection vulnerability 2. A cross-site request forgery vulnerability 3. A cross-site scripting vulnerability 4. An information-disclosure...

Zen Cart <= 1.5.1 Information Disclosure Vulnerability

Zen Cart is prone to an information disclosure vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Zen-Cart Database Backup Disclosure

Zen-cart Database Backup Disclosure Vulnerability /+/ Exploit title : Zen-cart Database Backup Disclosure Vulnerability /+/ Script : Zen-cart /+/ Version : 1.5.1 /+/ Author : JoKeRStEx /+/ Date : 22/07/2013 /+/ Category : Webapps /+/ Google Dork : inurl:"/zcinstall/sql/" First You can Donwload...

Ecshop后台getshell-2

简要描述： Ecshop后台getshell-2 详细说明： admin/database.php if $REQUEST'act' == 'dumpsql' 省略若干 if empty$REQUEST'sqlfilename' $sqlfilename = $dump-getrandomname; else 省略若干 $sqlfilename = strreplace"0xa", '', trim$REQUEST'sqlfilename'; // 过滤 0xa 非法字符 $pos = strpos$sqlfilename, '.sql'; if $pos !== false...

How to Migrate Veeam ONE Deployment

Purpose This article documents the procedure for migrating Veeam ONE to a different machine. This can be useful if: The machine where Veeam ONE is currently installed runs an OS that is no longer supported by the version of Veeam ONE you plan to upgrade to. Your existing Veeam ONE deployment shar...

Hoteldruid 1.3.2 LFI/SQLi/Add and Remove Users/Backup Download

Hoteldruid suffers from a number of vulnerabilities including, LFI/SQLi/Add and Remove Users/Backup Download +-- LFI --+ Vuln Links: ------------ http://localhost/hotel/mostrasorgente.php?filesorgente=/ +-- SQli --+ Vuln Links: ----------- http://localhost/hoteldruid/creaprezzi.php?anno=2012'...