Joomla RD Download SQL Injection

!/usr/bin/python Exploit Name: Joomla RD Download SQL Injection Version: Unknown Exploit discovered and written by Claudio Viviani Dork google 1: inurl:index.php?option=comrddownload Dork google 2: inurl:/component/rddownload/ Tested on BackBox 3.x http connection import urllib, urllib2 string...

MAARCH 1.4 - Arbitrary File Upload

/ Exploit Title: Maarch 1.4 Arbitrary file upload Google Dork: intext:"Maarch Maerys Archive v2.1 logo" Date: 29/10/2014 Exploit Author: Adrien Thierry Exploit Advisory: http://asylum.seraum.com/Security-Alert-GED-ECM-Maarch-Critical-Vulnerabilities.html Vendor Homepage: http://maarch.org Softwar...

jom3aco SQL Injection

jom3aco new SQL Injection Vulnerability ======================================= Author : indoushka Vondor : http://www.jom3a.com Dork : show.php?do=viewsubject&id=&ids= ========================== SQL Injection : http://localhost/www/show.php?do=viewsubject&id=&ids=14 inject her Fckeditor Upload :...

WordPress Backup plugin Ready! Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Ready! Backup Arbitrary File Download Vulnerability . Google Dork: inurl:/wp-content/upready/ . Date: 10-09-2014 . Author: Pro Mast3r . Author E-mail : email protected Category: webapps platform: php Vendor:...

Joomla Mac Gallery 1.5 - Arbitrary File Download

No description provided by source. Exploit Title : Joomla Mac Gallery = 1.5 Arbitrary File Download Exploit Author : Claudio Viviani Vendor Homepage : https://www.apptha.com Software Link : https://www.apptha.com/downloadable/download/sample/sampleid/18 Dork Google: inurl:option=commacgallery Dat...

WordPress Users Ultra 1.3.37 SQL Injection

Title : Wordpress Users Ultra Plugin - SQL injection Vulnerability Risk : High+/Critical Author : XroGuE Google Dork : inurl: wp-content/plugins/users-ultra/ Plugin Version : 1.3.37 Plugin Name : users ultra Plugin Download Link : https://downloads.wordpress.org/plugin/users-ultra.zip Vendor Home...

WordPress Plugin Category and Page Icons Multiple Vulnerabilities

WordPress Plugin 'Category and Page Icons' have suffers from multiple vulnerabilities File Deletion/File Upload. Exploit Title : WordPress Plugin 'Category and Page Icons' Multiple Vulnerabilities Exploit Author : NULLPointer Date : 2014-09-29 Download Link :...

CMS AutoWeb 3.0 SQL Injection

Sql Injection on CMS AutoWeb v3.0 + Date: 24/09/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.multdivision.com.br + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: mostrar.php + Dork :...

Wordpress Theme Strange File Upload / File Deletion

Exploit for php platform in category web applications Exploit Title : Wordpress Theme Strange File Upload / File Deletion Exploit Author : NULLPointer Contact : https://www.facebook.com/xenith.gianni Date : 21/09/2014 Github Mirror :...

WordPress Theme Konzept Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Theme Konzept Arbitrary File Upload Vulnerability Exploit Author : NULLPointer Contact : https://www.facebook.com/xenith.gianni Date : 19/09/2014 Vendor Homepage :...

WordPress Theme Jupiter Arbitrary File Download Vulnerability

WordPress Theme Jupiter suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/jupiter Demo sites:...

WordPress Theme Centum Arbitrary File Download Vulnerability

WordPress Theme Centum effected with Arbitrary File Download Vulnerability POC http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork :inurl:wp-content/themes/centum Demo sites...

WordPress Theme X Arbitrary File Download Vulnerability

WordPress Theme X suffers from Arbitrary File Download Vulnerability Exploit : http://127.0.0.1/wp-admin/admin-ajax.php?action=revslidershowimage&img=LFD Google Dork : inurl:wp-content/themes/x Demo Sites :...

Wordpress Webcam 2Way Videochat Plagin XSS Vulnerability

The VideoWhisper 2 Way Video Chat is a web based video application designed for instant 1 on 1 private online video conferencing. Exploit Title : Wordpress Plugin Webcam 2Way Videochat XSS Vulnerability Exploit Author : NULLPointer Date : 17/09/2014 Download Link :...

EGYWEB (Mantrac) <= Remote File Disclosure Exploit

database passwords can be drawn.. Usage Info python exploit.py http://TARGET.COM EGYWEB Mantrac Example and tested on; http://www.deltagroup.com.eg http://www.mantracvostok.ru http://www.mantracghana.com http://www.mantracnigeria.com http://www.mantrackenya.com http://www.mantractanzania.com...

Booter Website Remote Root Exploit

This exploit gives you a remote root privilege shell on the backend servers of the booter. It only works with booters that have layer-7 attack methods. Google Dork: intitle:Booter "Login" This is private exploit. You can buy it at https://0day.today...

Joomla Spider Form Maker <= 4.3 SQL Injection Vulnerability

Joomla Spider Form Maker versions 4.3 and below suffer from a remote SQL injection vulnerability. Exploit Title : Joomla Spider Form Maker = 4.3 SQLInjection Exploit Author : Claudio Viviani Vendor Homepage : http://web-dorado.com/ Software Link : http://web-dorado.com/products/joomla-form.html...

WordPress MichaelCanthony theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Date: 2014-09-11 Google Dork : inurl:/wp-content/themes/MichaelCanthony/ Exploit Author: Mr.Doel Vendor Homepage: http://michaelcanthony.com Tested on: Windows 7 & Linux POC :...

WordPress Epic Arbitrary File Download Vulnerability

WordPress Epic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress epic theme...

WordPress Urban City Arbitrary File Download Vulnerability

WordPress Urban City theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city...