WordPress Plugin WPAMS - SQL Injection

Exploit Title: WPAMS - Apartment Management System for wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/wpams-apartment-management-system-for-wordpress/15946837 Demo:...

Simple Blog PHP 2.0 - Multiple Vulnerabilities

Simple Blog PHP 2.0 - Multiple Vulnerabilities ===================================================== Simple Blog PHP 2.0 - CSRFAdd Post // Stored XSS ===================================================== Vendor Homepage: http://simpleblogphp.com/ Date: 13 Oct 2016 Demo Link :...

NetBilletterie 2.8 - Multiple Vulnerabilities

NetBilletterie 2.8 - Multiple Vulnerabilities Exploit Title: NetBilletterie 2.8 | Multiple Vulnerabilities Date: 14/07/16 Exploit Author: Wadeek Website Author: https://github.com/Wad-Deek Vendor Homepage: http://net-billetterie.tuxfamily.org/ Software Link:...

ManageEngine Firewall Analyzer 8.0 - Directory Traversal/XSS Vulnerabilities

Exploit for hardware platform in category web applications ...:::::ManageEngine Firewall Analyzer Directory Traversal/XSS Vulnerabilities::::.... Sobhan System Network & Security Group sobhansys ------------------------------------------------------- Date: 2015-01-28 Exploit Author: AmirHadi...

华天动力储存XSS（11处打包，非self-xss）

简要描述： 缺个移动硬盘存片子 详细说明： 上次提交说是self-xss，为了证明不是self-xss，这次打一下管理cookie吧 demo演示，涉及大量政府，医院，房产，电视台等网站：http://www.oa8000.com/solution.htm 首先还是来到官网，看到demo演示地址：http://demo.oa8000.com 然后先用官方提供的普通用户登录 存在XSS的地方在：客户管理--我的客户--新建...

MyBB Games Cross Site Scripting

Exploit Title :Mybb Games xss Vul Author : DarkSnipper ,Dream.Killer & Soulinj3ctor Discovered By : [email protected] Home : http://cybercoders.org Link : http://mods.mybb.com/view/game-section Security Risk : High Version : All Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Vargonen Forums SQL Injection

Exploit Title: Vargonen Forums SQL Injection Vulnerability Date: 01/03/2012 Author: 3spi0n Software Website: http://vargonen.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Article.php $ Demo ; www.yuzuklerinefendisi.com/article.php?sid=2120' MySQLi Dar bi Koridor...

MyJobList v0.1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : MyJobList v0.1.3 SQL Injection Vulnerability Author : Red Security TEAM Date : 25/02/2012 Risk : High Download : http://www.oddnormality.com/programs/php/MyJobList.v0.1.3.zip Demo : http://www.oddnormality.com/demos/myjoblist/ Tested O...

Conduit Wibiya Open URL Redirection

TITLE: Conduit Wibiya open URL Redirection vendor: Conduit Author: r007k17-w Email: [email protected] http://www.facebook.com/!/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: Modular Patterns Ltd. c 2012...

Zocalo Design SQL Injection

By : CR9 Greetz : Perspicacious Hackers In The World . ++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : Zocalo Design SQL Injection Vulnerability Vendor : http://www.zocalodesign.com Author : CR9 Home : Http://Nopotm.ir Archive : http://CR9Exploits.zio.ir Email :...

Textpattern 4.3.0 Cross Site Request Forgery

Exploit Title: Textpattern 4.3.0 CMS XSRF Vulnerability Change Admin's Password + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=94&type=2 + Demo...

MODx Revolution 2.0.8-pl CMS XSRF Vulnerability (Add new user)

Exploit for php platform in category web applications + Exploit Title: MODx Revolution 2.0.8-pl CMS XSRF Vulnerability Add new user + Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + Category : Web Apps XSRF + Demo Link : http://www.cmsagora.com/demo.php?id=50&type=2 + Demo Login: Username:...

T-Dreams Cars Ads Package SQL Injection Vulnerability

Exploit for asp platform in category web applications ===================================================== T-Dreams Cars Ads Package SQL Injection Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 ...

Joomla PaymentsPlus Mtree 2.1.5 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= Joomla PaymentsPlus Mtree 2.1.5 Blind SQL Injection Vulnerability =================================================================...

Lokomedia CMS File Disclosure

Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site : http://vir0e5.blogspot.com + DorK : inurl:/downlot.php?file= + Exploit :...

QuickTeam 2.2 - SQL Injection

QuickTeam 2.2 - SQL Injection | D R U N K E N | || || || D A N I S H | || || |' R E D N E C K S '--''--''--' RESEARCH AND FUCKING HACKING: | DRUNKEN DANISH REDNECKS | || || || !!!!!!! | || || |' [email protected] '--''--''--' = QUICKTEAM 2.2 SQL INJECTION WE STEEL YOUR DAMNED...

Password Protector SD 1.3.1 - Insecure Cookie Handling

Password Protector SD 1.3.1 - Insecure Cookie Handling ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script : Password Protector SD v1.3.1 Insecure Cookie Handling...

SkyPortal Classifieds System 0.12 Contents Change Vulnerability

Exploit for unknown platform in category web applications =============================================================== SkyPortal Classifieds System 0.12 Contents Change Vulnerability =============================================================== @email protected @=Script :SkyPortal Classified...

Ping IP SQL Injection

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Ping IP Auth Bypass SQL Script : Ping IP Price : $59 : Demo : http://warhound.com/ASP/ping/admin.aspx Details : http://warhound.com/asp/products.htm Admin : PATH /ping/admin.aspx username : ' or '1 password : '...

Product Sale Framework 0.1b (forum_topic_id) SQL Injection Vulnerability

No description provided by source. +++++++++++++++++++++++In The Name Of Allah+++++++++++++++++++++++++++ + + + Product Sale Framework sql injection Vulnerability + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + +...