MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload

============================================== File Upload Vulnerability Plugins tinymce ============================================== http://tinymce.moxiecode.com/pluginsfilemanager.php Major version 3 Minor version 2.2.3 Author : Vladimir Vorontsov Contact : d0znpp at gmail dot com Greetz : GN...

MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload

MCFileManager Plugin for TinyMCE 3.2.2.3 - Arbitrary File Upload ============================================== File Upload Vulnerability Plugins tinymce ============================================== http://tinymce.moxiecode.com/pluginsfilemanager.php Major version 3 Minor version 2.2.3 Author :...

Virtual Store Open 3.0 - Acess SQL Injection

!/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection Found: Br0ly google dork:...

QualDev eCommerce script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: QualDev eCommerce script SQL injection vulnerability Vendor: http://www.qualdev.com Date: 15.12.2010 Version: all version Category:: webapps Google dork: inurl:"index.php?file=allfile" Tested on: FreeBSD 7.1 Author: ErrNick Site...

MyBB Cross Site Scripting

MyBB all version tags.php?tag= - Cross-Site Scripting XSS & HTML Injection http://www.mybb.com 12-12-2010 Poc: http://infectionsupport.com/tags.php?tag= "alertString.fromCharCode88,83,83 http://infectionsupport.com/tags.php?tag=" Google dork: powered by mybb inurl:tags.php?tag= by Teamelite...

Joomla Redirect Local File Inclusion

=========================================================================== Title : Joomla Component Redirect LFI Software : Joomla 1.5.19+ Vendor : http://www.tutorialjoomla.net/ Download : http://www.tutorialjoomla.net/2010/11/joomla-extensions-redirect-for-joomla-1-5/ Author : josalijoe Homepa...

SOOP Portal Raven 1.0b Shell Upload Vulnerability

Exploit for asp platform in category web applications ================================================= SOOP Portal Raven 1.0b Shell Upload Vulnerability ================================================= Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered...

SOOP Portal Raven 1.0b Shell Upload

Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered by SOOP Portal Raven 1.0b" Date: 06-12-2010 Author: Sun Army Version: Raven 1.0b Tested on: Win 2003 Exploit 1.Register On Site 2.Shell Renamed to .asp.jpg shell.asp.jpg 3.Go This Page --...

SOOP Portal Raven 1.0b - Arbitrary File Upload

Exploit Title: SOOP Portal Raven 1.0b Remote Upload Shell Vulnerability Google Dork: "Powered by SOOP Portal Raven 1.0b" Date: 06-12-2010 Author: Sun Army Version: Raven 1.0b Tested on: Win 2003 Exploit 1.Register On Site 2.Shell Renamed to .asp.jpg shell.asp.jpg 3.Go This Page --...

PHPKF Forum 1.80 - 'profil_degistir.php' Cross-Site Request Forgery

Exploit Title : phpKF Forum profildegistir.php CSRF Exploit. Google Dork : php Kolay Forum phpKF © 2007 - 2010 phpKF Ekibi Date : 05-12-2010 Author : FreWaL Software Link : http://www.phpkf.com/dosya.php?no=935 Version : 1.80 and tested on All version My Website : www.imhatimi.org & www.ihtilal.i...

Alibaba Clone B2B 3.4 - SQL Injection

Alibaba Clone B2B 3.4 - SQL Injection Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date: 29.11.2010 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / ...

PHP Atividades Program SQL Injection

=================================================== PHP Atividades program SQL Injection Vulnerability =================================================== +Title : PHP Atividades program SQL Injection Vulnerability +Software : Atividades Program +Vendor : http://www.atividadeseducativas.com.br/...

Alibaba Clone B2B 3.4 SQL Injection

Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date: 29.11.2010 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / /...

Alibaba Clone B2B 3.4 - SQL Injection

Exploit Title:Alibaba v3.4 clone b2bcountrydetails.php SQL Injection Vulnerability Date: 29.11.2010 Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / /...

Joomla Competitions Cross Site Scripting

======================================================================= Joomla Component comcompetitions XSS/HTML Vulnerability ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /...

PHP Place SQL Injection

=========================================== PHP Place SQL Injection Vulnerability =========================================== +Title : PHP Place SQL Injection Vulnerability +Software : PHP Place +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home :...

PHP Trainers SQL Injection

=========================================== PHP Trainers Blind SQL Injection =========================================== +Title : PHP Trainers SQL Injection +Software : PHP Trainers +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeatyahoodotcom +Home :...

S_CMS 2.5 - Multiple Vulnerabilities

============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms/ Vulnerability Type: Full Path...

Nuked-Klan Module Boutique Blind SQL Injection

Exploit for php platform in category web applications ============================================== Nuked-Klan Module Boutique Blind SQL Injection ============================================== Exploit Title: module boutique nuked klan Google Dork: inurl:index.php?file=Boutique Date: 15/11/2010...

Crave Media CMS SQL Injection

In The Name Of GOD + Exploit Title: Crave Media CMS SQL Injection Vulnerability + Date: 2010-11-14 + Author : Cru3l.b0y + Software Link: http://www.cravemedia.no/ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...