gigCalendar 1.0 (banddetails.php) Joomla Component SQL Injection

Salvatore "drosophila" Fresta Application: gigCalendar Joomla Component 1.0 http://joomlacode.org/gf/project/gigcalendar/ Version: gigCalendar 1.0 Bug: SQL Injection Exploitation: Remote Dork: inurl:"index.php?option=comgigcal" Date: 21 Feb 2009 Discovered by: Salvatore "drosophila" Fresta Author...

gigCalendar 1.0 (venuedetails.php) Joomla Component SQL Injection

Salvatore "drosophila" Fresta Application: gigCalendar Joomla Component 1.0 http://joomlacode.org/gf/project/gigcalendar/ Version: gigCalendar 1.0 Bug: SQL Injection Exploitation: Remote Dork: inurl:"index.php?option=comgigcal" Date: 21 Feb 2009 Discovered by:Salvatore "drosophila" Fresta Author:...

E107 CMS (e107_plugins/guestbook) stored XSS

Фильтрация отсутствует в поле "Email", POST запрос: POSTDATA=name=1&email='/"scriptalert'xss'/script&url=http3A2F2F&comment=4&guestbooksubmit=SiC5B3sti Далее следует редактирование сообщения. http://Target/e107plugins/guestbook/guestbook.php?edit.номер вашего сообщения Example:...

Jieqi cms <= 1.5 remote code execution exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Jieqi cms = 1.5 remote code execution exploit by Flyh4t mail: [email protected] team: http://www.wolvez.org dork: "技术支持：杰奇网络"...

Team Board Disclosure / XSS

--------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS --------------------------------------------------------- DD:...

team 1.x - File Disclosure Cross-Site Scripting

team 1.x - File Disclosure Cross-Site Scripting --------------------------------------------------------- Portal Name: Team Board Version : all version Google Dork : team5 studio all rights reserved site:cn Author : PouyaServer , [email protected] Vulnerability : DD/XSS...

Bugs Online v2.14 Sql Injection

Bugs Online v2.14 Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== Orca 2.0.2 Topic Remote XSS Vulnerability =========================================== --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xs...

Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore...

Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog...

Max.Blog <= 1.0.6 (show_post.php) SQL Injection Vulnerability

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

E-ShopSystem SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

E-ShopSystem - Authentication Bypass / SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

SHOP-INET v4 (show_cat2.php grid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SHOP-INET v4 showcat2.php grid SQL Injection Vulnerability ============================================================= Exploit :...

E-ShopSystem - Authentication Bypass SQL Injection

E-ShopSystem - Authentication Bypass SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Joomla component beamospetition 1.0.12 Sql Injection

Joomla component beamospetition 1.0.12 Sql Injection / Xss Author : vdss Dork : "Powered by beamospetition 1.0.12" Dl : http://joomlacode.org/gf/project/beamospetition/ Xss : http://site/?option=combeamospetition&func=sign&pet='scriptalert'Xss'/script Sql Injection :...

Joomla Beamospetition 1.0.12 XSS / SQL Injection

Joomla component beamospetition 1.0.12 Sql Injection / Xss Author : vdss Dork : "Powered by beamospetition 1.0.12" Dl : http://joomlacode.org/gf/project/beamospetition/ Xss : http://site/?option=combeamospetition&func=sign&pet='alert'Xss' Sql Injection :...

Joomla Component beamospetition 1.0.12 SQL Injection / XSS

Exploit for unknown platform in category web applications ========================================================== Joomla Component beamospetition 1.0.12 SQL Injection / XSS ========================================================== Joomla component beamospetition 1.0.12 Sql Injection / Xss...

Fhimage 1.2.1 - Remote Index Change

Fhimage 1.2.1 - Remote Index Change !/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1...