Mambo AHS Shop SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comahsshop SQL Injection Vulnerability Google Dork: inurl:index.php?option=comahsshop Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Namskeid Cross Site Scripting

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-namskeid XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-namskeid Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Gallery SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-gallery SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-gallery Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo N-Skyrslur Cross Site Scripting

------------------------------------------------------------------------------------------------------------------------------- Exploit Title: Mambo Component comn-skyrslur XSS & HTML Injection Vulnerability Google Dork: inurl:index.php?option=comn-skyrslur Date: 01/09/2011 Author: CoBRa21...

Mambo N-Frettir SQL Injection

------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-frettir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-frettir Date: 01/09/2011 Author: CoBRa21 Penetration Tester E-Mail:...

Mambo Component com_n-myndir SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------------------------------ Exploit Title: Mambo Component comn-myndir SQL Injection Vulnerability Google Dork: inurl:index.php?option=comn-myndir Date: 01/09/2011...

EIN-SOF Solutions Blind SQL Injection

========================================================================= EIN-SOF Solutions BLIND SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ |...

Infomedya SQL Injection

´´´´´´´´´´´´´´´´´´´´´¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´´´´¶¶¶¶¶¶´´´´´´´´´´´´´¶¶¶¶¶¶¶´´´´´´´´´´´´´´´´ ´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´´´´´´´´´´¶¶¶¶´´´´´´´´´´´´´´ ´´´´´´´´´´´´´¶¶¶´´´´´´´´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´´´´ ´´´´´´´´´´´´¶¶´´´´´´´´´ ´´´´´´´´´´´´´´´´´´´´´´¶¶´´´´´´´´´...

Joomla Simple File Lister module <= 1.0 Directory Traversal Vulnerability

No description provided by source. Exploit Title: Joomla Simple File Lister module = 1.0 Directory Traversal Vulnerability Google Dork: "Simple File Lister v1.0" "Files in directory" Date: 2011-08-28 Author: evilsocket evilsocket at gmail dot com Software Link:...

WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Photoracer plugin = 1.0 SQL Injection Vulnerability Google Dork: inurl:"wp-content/plugins/photoracer/viewimg.php" Date: 2011-08-26 Author: evilsocket evilsocket at gmail dot com Software Link:...

Buchanan Solutions SQL Injection

+------------------------------------------------------------------------------------------+ |------------------------ B-Solutions SQL Injection Vulnerability -----------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

WordPress Plugin Photoracer 1.0 - SQL Injection

WordPress Plugin Photoracer 1.0 - SQL Injection Exploit Title: WordPress Photoracer plugin prefix."photoracer where imgid=$imgid"; $out = $wpdb-getrow$q1; --- PoC --- http://www.site.com/wp-content/plugins/photoracer/viewimg.php?id=-1 UNION SELECT 0,1,2,3,4,VERSION,6,7,8...

WEBSOURCE CMS SQL Injection

+------------------------------------------------------------------------------------------+ |----------------------- WEBSOURCE CMS SQL Injection Vulnerability ----------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

WordPress Yoast 4.1.3 Local File Disclosure

!/bin/python print "" print " Exploit Title:WordPress Yoast v4.1.3 Local File Disclosure Vulnerability" print " Author:Angel Injection " print " Home Page: http://dev-point.com http://sec-krb.org " print " Exploit find By H7acker110 " print " python exploit find By Miroslav Stampar " print "...

WordPress Plugin Photoracer 1.0 - SQL Injection

Exploit Title: WordPress Photoracer plugin prefix."photoracer where imgid=$imgid"; $out = $wpdb-getrow$q1; --- PoC --- http://www.site.com/wp-content/plugins/photoracer/viewimg.php?id=-1 UNION SELECT 0,1,2,3,4,VERSION,6,7,8...

1stdesign SQL Injection

+------------------------------------------------------------------------------------------+ |------------------------- 1stdesign SQL Injection Vulnerability ------------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

Planeteria Design ASP SQL Injection

+------------------------------------------------------------------------------------------+ |------------------ Planeteria Design ASP MsSQL Injection Vulnerability -----------------| +------------------------------------------------------------------------------------------+ + Google Dork :...

WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...

WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using $usercount for the boolean condition checking :...

Mambo 4.6.5 CSRF Vuln (Change Admin Password)

Exploit for php platform in category web applications ===================================================================== . . . . | | ||/ | || | / / \ / /\ | | / | \ \ | |/ | \ / | || | // | / // | \ /\ | /|//|||| |\ | / /|| / Exploit-ID is the Exploit Information Disclosure Web :...