WordPress Trinity Theme Arbitrary File Download

Exploit Title: Wordpress Trinity theme Arbitrary File Download Vulnerability Date: 9/10/2014 Google Dork : inurl:/wp-content/themes/trinity/lib Exploit Author: Mr.Doel Vendor Homepage: https://churchthemes.net/themes/trinity/ Tested on: Windows 7 POC :...

WordPress Authentic Arbitrary File Download Vulnerability

WordPress Authentic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress Authentic...

WordPress Urban City Arbitrary File Download

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress urban city Arbitrary File Download Vulnerability | | Google Dork: inurl:wp-content/themes/urbancity | | Date : Date: 2014-09-07 | | Exploit...

WordPress Like Dislike Counter 1.2.3 SQL Injection

Title : Wordpress Like Dislike Counter Plugin SQL Injection Vulnerability Risk : High+/Critical Exploit Author : XroGuE Google Dork : inurl:plugins/like-dislike-counter-for-posts-pages-and-comments/ajaxcounter.php AND plugins/pro-like-dislike-counter/ldc-ajax-counter.php Plugin Version : 1.2.3...

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection

vBulletin 4.0.x 4.1.2 - search.php?cat SQL Injection vBulletin 4.0.x = 4.1.2 AUTOMATIC SQL Injection exploit Author: D35m0nd142, Google Dork: inurl:search.php?searchtype=1 Date: 02/09/2014 Vendor Homepage: http://www.vbulletin.com/ Tested on: vBulletin 4.1.2 Usage: perl exploit.pl Tutorial video:...

WordPress CuckooTap Theme & eShop Arbitrary File Download

Exploit for php platform in category web applications WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: email protected Date: 31/08/2014 Vendor Homepage:...

WordPress FR0_theme theme Arbitrary File Download Vulnerability

Exploit for php platform in category web applications +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : WordPress FR0theme theme Arbitrary File Download Vulnerability Author : alieye designer Homepage : http://english.gg.go.kr/ Contact : email protected Risk : High Class: Remote...

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download

Mulitple WordPress Themes - admin-ajax.php?img Arbitrary File Download WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage:...

Mulitple WordPress Themes - 'admin-ajax.php?img' Arbitrary File Download

WordPress CuckooTap Theme & eShop Arbitrary File Download Risk: High CWE number: CWE-200 Author: Hugo Santiago Contact: [email protected] Date: 31/08/2014 Vendor Homepage: http://themeforest.net/item/cuckootap-one-page-parallax-wp-theme-plus-eshop/3512405 Tested on: Windows 7 and Gnu/Linux...

WordPress Plugin WooCommerce Store Exporter 1.7.5 - Multiple Cross-Site Scripting Vulnerabilities

WordPress Plugin WooCommerce Store Exporter 1.7.5 - Multiple Cross-Site Scripting Vulnerabilities Exploit Title: WooCommerce Store Exporter v1.7.5 Stored XSS Google Dork: inurl:"woocommerce-exporter" Date: 26/08/2014 Exploit Author: Mike Manzotti @ Dionach Vendor Homepage:...

Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities

Exploit Title: Pro Chat Rooms v8.2.0 - Multiple Vulnerabilities Google Dork: intitle:"Powered by Pro Chat Rooms" Date: 5 August 2014 Exploit Author: Mike Manzotti @ Dionach Ltd Vendor Homepage: http://prochatrooms.com Software Link: http://prochatrooms.com/software.php Version: v8.2.0 Tested on:...

MEHR Automation System Arbitrary File Download Vulnerability(persian portal)

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : MEHR Automation System Arbitrary File Download Vulnerabilitypersian portal Author : alieye vendor : http://shakhesrayane.ir/ Contact : [email protected] Risk : High Class: Remote Google Dork: intext:"[email protected]"...

WordPress ShortCode 0.2.3 Local File Inclusion

Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 0.2.3 Plugin Name : Download ShortCode Vendor Home : http://werdswords.com/ Date :...

GEL CMS 4.0 SQL Injection Vulnerability

GEL CMS version 4.0 suffers from a remote SQL injection vulnerability that allows for login bypass. ad8888888888ba Bypass super-Admin GEL4.0 dP' "8b, 8 ,aaa, "Y888a ,aaaa, ,aaa, ,aa, 8 8' 8 "8baaaad""""baaaad""""baad""8b 8 8 8 """" """" "" 8b 8 8, ,8 ,aaaaaaaaaaaaaaaaaaaaaaaaddddd88P 8 """' ,d8""...

Bing Dork Scanner - Tool to extract urls from a bing search

This is a simple script with GUI, to extract urls from a bing search. Support only HTTP proxy. Required Perl Modules: LWP Gtk2 Glib uft8 threads threads::shared URI::Escape Download Bing Dork Scanner...

DirPHP 1.0 - Local File Include Vulnerability

Exploit for php platform in category web applications Exploit Title: DirPHP - version 1.0 Local File Inclusion Google Dork: intext:DirPHP - version 1.0 - Created & Maintained by Stuart Montgomery Date: 7/26/14 Exploit Author: -Chosen- Version: DirPHP - Version 1.0 Tested on: nix PoC:...

Sum Technologies SQL Injection

Exploit Author:Th3 R0cksT3r Exploit Title: Sum Technologies id SQL Injection Vulnerability Email: [email protected] Vendor Homepage: http://www.sumtechnologies.com/ Google Dork: intext:"Powered by Sum Technologies" Proof Of Concept: 1. https://server/elferecting.php?id=SQL Injection 2...

WordPress Plugin Gallery Objects 0.4 - SQL Injection

WordPress Plugin Gallery Objects 0.4 - SQL Injection Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

OL-Commerce 2.1.1 Cross Site Scripting / SQL Injection

OL-Commerce v2.1.1 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Joomla Youtube Gallery Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh email protected Vendor Homepage:...