Snippet CMS 2.9 Cross Site Scripting

Exploit Title: Snippet CMS v2.9 XSS Vulnerability Google Dork: "Powered by Snippet CMS" Date: 23.09.2011 Author: CoBRa21 Version: 2.9 Tested on: Unix Server ------------------------------------------------------------------------------------------------------- Exploits...

TunerLabs SQL Injection

================================================ Exploit Title : TunerLabs SQL Injection Vulnerability Google Dork : intext:"Powered by TunerLabs" Date : 2011-21-09 Author : nGa Sa Lu GaNgst3r Service Link : http://www.tunerlabs.com Tested on : Vista Platform : php + Google Dork : intext:"Powered...

A-Cart Pro SQL Injection

Exploit Title: A-CART Pro SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- A-CART Pro SQL Injection Vulnerability Vendor: http://www.alanward.net/acart/ Demo :...

WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion

WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion Exploit Title: Annonces Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/annonces Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software...

Gocommerced SQL Injection

Exploit Title: Gocommerced SQL Injection Vulnerability Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- Gocommerced SQL Injection Vulnerability Vendor: http://www.gocommerced.com/index.php Download : ------------------...

WordPress Plugin Filedownload 0.1 - 'download.php' Remote File Disclosure

Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

WordPress Filedownload 0.1 File Disclosure

Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

Gap Infotech Team SQL Injection

Exploit Title: Gap Infotech Team SQL Injection Vulnerability -Google Dork-: "Powered by: Gap Infotech Team" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.gapinfotech.com Tested on: Vista Platform : php Google Dork : "Powered by: Gap Infotech Team"...

WordPress Filedownload Plugin 0.1 (download.php) Remote File Disclosure

Exploit for php platform in category web applications Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...

ClearMindGraphics SQL Injection

Exploit Title: ClearMindGraphics SQL Injection Vulnerability -Google Dork-: "Site by: ClearMindGraphics" Date: 2011-18-09 Author: nGa Sa Lu GaNgst3r Service Link: http://www.clearmindgraphics.com/ Tested on: Vista Platform : php Google Dork : "Site by: ClearMindGraphics"...

Minmax SQL Injection

Exploit Title: minmax SQL INJECTION Vulnerabilities Date: 14/09/2011 Author: nGa Sa Lu N-S-L Service Link: http://minmax.biz Tested on: Vista Google Dork: intext:"Design by MINMAX." www.site.com/productsinfo.php?ID=SQL SQL Error Statement You have an error in your SQL syntax; check the manual tha...

JAM SQL Injection

Exploit Title: JAM SQL Injection Vulnerability Google Dork: intext:"This site is preserved by JAM" Date: 2011-15-09 Author: nGa Sa Lu N-S-L Service Link: http://www.jamarketing.co.nz Tested on: Debian GNU/Linux 5.0 Google Dork : intext:"This site is preserved by JAM"...

Intellasoft SQL Injection

Exploit Title: Intellasoft SQL INJECTION Vulnerabilities Date: 12/09/2011 Author: nGa Sa Lu N-S-L Service Link: http://www.intellasoft.ca Tested on: Vista Google Dork: "Site designed by Intellasoft" SQL Error Statement ERROR - Please try again - if this error keeps occurring please notify site...

PHP Support Tickets 2.2 - Code Execution

PHP Support Tickets 2.2 - Code Execution Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2 ===================================================================...

PHP Support Tickets v2.2 Code Exec

Exploit for php platform in category web applications Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2...

Virtualismi (prodotto.php?id) Cross Site Scripting Vulnerabilities

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Loop ricetta.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.loopmm.com/ Persian Gulf 4 Ever! Dork : "Loop - creazioni multimediali" "inurl:ricetta.php?id="...

Pluck 4.7 Local File Inclusion / Disclosure

Exploit Title: Pluck 4.7 multiple vulnerabilities Google Dork: Powered by pluck Date: 05/08/2011 Author: Bl4k3 Software Link: http://www.pluck-cms.org/?file=download Version: 4.7 Tested on: Debian CVE : / 1-File Inclusion: includeALBUMSDIR.'/'.$GET'album'.'.php'; Require: if...

Mambo N-Press SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-press SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-press Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-shop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-shop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...