LiteRadius <= 3.2 - Multiple Blind SQL Injection Vulnerabilities

No description provided by source. Exploit Title: LiteRadius = 3.2 - Multiple Blind SQL Injection vulnerabilities Google Dork: allinurl: locator.php?long= Date: 7/12/2011 Author: Robert Cooper adminatwebsiteauditing.org Software Link: http://www.escaperadius.com/er/products/literadius/lr.php Test...

Joomla Component com_otzivi Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comotzivi Blind SQL Injection Vulnerability Author : Cyber945 Home : Ar-ge.Org Greetz : By.Danger,D3xer,LionTurk and All Ar-ge.Org Members Not3 : Ar-ge.Org Online Name : comotzivi Bug Typ...

MARINET CMS (room.php) <= Blind SQL Vulnerability

No description provided by source. ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Cente...

AV Arcade Free Edition (add_rating.php, id parameter) Blind SQL Injection

No description provided by source. Exploit Title: AV Arcade Free Edition Blind SQL Injection Date: 31/08/2012 Author: DaOne @LibyanCA Software Link: http://www.avscripts.net/avarcade/freearcadescript/ Google Dork: intext:Powered by AV Arcade Free Edition Exploit-DB Note: Must be logged in. Exploi...

Wordpress Theme Fusion Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Fusion Arbitrary File Download Vulnerability Author : Aloulou Date...

NeginGroup CMS Multiple Vulnerability

Sql Injection And Xss Vulnerability In NeginGroup Cms @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@...

DNN &#40;DotNetNuke®&#41; CodeEditor Module Arbitrary File Download Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® CodeEditor Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.mediaant.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...

DotNetNuke ResponsiveSidebar Arbitrary File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® responsivesidebar Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.mediaant.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...

Cetil Cross Site Scripting

Post Cross Site Scripting on Cetil - Demonstrativo de Pagamento de Salário + Date: 27/05/2014 + Risk: LOW + CWE number: CWE-79 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.cetil.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File:...

Assesi SQL Injection

Sql Injection on CMS Assesi + Date: 01/06/2014 + CWE Number : CWE-89 + Risk: High + Author: Felipe Andrian Peixoto + Vendor Homepage: http://assesi.com.br/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: vereadores.php + Dork : intext:Assesi - Assessoria e...

WebBoard CMS Cross Site Scripting

. ,;' / . ,'/ .' . X /.' .-;--''--.. .' / , IeDb.ir ' Q ' , , . \ ,.| ' -.;' : . ; --,..; ' , .' . , ' / ; ,''-,;' - -..-- Exploit Title : WebBoard CMS Multiple Vulnerability Author : IeDb Security Team Discovered By : Bl4ck M4n Home : http://www.iedb.ir/acc Security Risk : High...

WordPress Conversion Ninja Cross Site Scripting Vulnerability

WordPress Conversion Ninja plugin suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. ++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date:...

phpnuke 8.3 Sql Injection Vulnerability

Exploit for php platform in category web applications author : ali ahmady -- Iranian security researcher email : snip3rirathotmail.com greets : b0x , PhantomX , VIRkid , email protected , zeus REKCAH , milad22 google dork : inurl: modules.php?name=SubmitNews at post review level you can inject...

WordPress bib2html 0.9.3 Cross Site Scripting Vulnerability

WordPress bib2html plugin version 0.9.3 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress...

WordPress bib2html 0.9.3 Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress bib2html Cross site scripting Vulnerability | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-05-22 | | Vendor Homepage ...

Wordpress Theme Echea Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Echea Shell Upload Vulnerability Author : Aloulou Date : 15/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.themeforest.net Google Dork : inurl:/wp-content/themes/echea/ Tested ...

Enquete yS 1.0 SQL Injection

Enquete yS - Full v. 1.0 POST SQL Injection in Panel Admin Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: [email protected] Date: 08/05/2014 Vendor Homepage: http://phpbrasil.com/script/AG216GUqK7nS/enquete-ys--full-v-10-yourspotcombr Version: v1.0 Tested on: Windows 7...

WordPress Photo-Gallery Cross Site Request Forgery

Wordpress Cross Site Request Forgery in Plugin photo-gallery + Date: 07/05/2014 + Risk: HIGH + Author: Felipe Andrian Peixoto + Vendor Homepage: https://wordpress.org/plugins/photo-gallery/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: UploadHandler.php...

E-Store &#40;1.0 &amp; 2.0&#41; &lt;= SQL Injection Vulnerability

Exploit Author: Nawaf Alkeraithe ====================================== for "E-store 1.0": Google Dork: "Powered by: PD" inurl:"page.php?id" Vulnerable page: http://target/page.php?id=SQL Injection ====================================== for "E-store 2.0": Google Dork: "Powered by: PD"...

WordPress thecotton Themes Remote File Upload Vulnerability

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...