Joomla JE Quiz 2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Quiz 2.3 - SQL Injection Google Dork: inurl:index.php?option=comjequizmanagement Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE auction 1.6 - 'eid' SQL Injection

Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/auction/je-auction/ Demo:...

Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

Joomla! Component JE Grid Folio - 'id' SQL Injection

Exploit Title: Joomla! Component JE Grid Folio - SQL Injection Google Dork: inurl:index.php?option=comjegridfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: http://www.joomlaextension.biz/demo/index.php?option=comjegridfolio Demo:...

Joomla! Component JE Auto 1.5 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/je-auto/ Demo:...

Joomla! Component JE Classify Ads 1.2 - pro_id SQL Injection

Joomla! Component JE Classify Ads 1.2 - proid SQL Injection Exploit Title: Joomla! Component JE Classify Ads 1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeclassifyads Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Portfolio Creator 1.2 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Portfolio Creator v1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeportfolio Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla Sponsor Wall 7.0 SQL Injection

Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir...

Netman 204 - Backdoor Account / Password Reset Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netman 204 Backdoor and weak password recovery function Google Dork: intitle:"Netman 204 login" Date: 31st Jan 2017 Exploit Author: Simon Gurney Vendor Homepage: blog.synack.co.uk Software Link:...

HelpDeskZ SQL Injection / File Download

Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...

HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download

''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...

HelpDeskZ 1.0.2 - (Authenticated) SQL Injection Unauthorized File Download

HelpDeskZ 1.0.2 - Authenticated SQL Injection Unauthorized File Download ''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3;...

Joomla Store Locator 2.3.1.0 Cross Site Scripting

Exploit Title: Joomla Component Store Locator 2.3.1.0 - Cross-site scripting Date: 2017-1-28 Home : https://extensions.joomla.org/extension/store-locator/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel ...

Joomla! Component JTAG Calendar 6.2.4 - 'search' SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

Movie Portal Script 7.36 - Multiple Vulnerabilities

Movie Portal Script 7.36 - Multiple Vulnerabilities Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability Google Dork : - Date : 20/01/2017 Exploit Author : Marc Castejon Vendor Homepage : http://itechscripts.com/movie-portal-script/ Software Link: http://movie-portal.itechscripts.co...

Diazcreativos Cms Bypass Admin Page Vulnerability

Exploit for php platform in category web applications |=============================================================| |-------------------In The Name Of God------------------------| | | Exploit Title: Diazcreativos Cms Bypass Admin Page Vulnerability | | Exploit Author: Ashiyane Digital Security...

Airbnb Clone Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

Penny Auction Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Penny Auction Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/ Script Name: Penny Auction Script Script Buy Now:...

Movie Portal Script 7.35 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: Movie Portal Script v7.35 - SQL Injection Web Vulnerability Google Dork: Movie Portal Script Date:11.01.2017 Vendor Homepage: http://itechscripts.com/movie-portal-script/ Tested on: http://movie-portal.itechscripts.com/ Script...

Airbnb Clone Script - Arbitrary File Upload

Airbnb Clone Script - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...