WordPress Myflash Local File Inclusion

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Myflash Plugin | Local File Inclusion Vulnerability | Google Dork: inurl:"/myflash/myextractXML.php?path=" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Locatio...

WordPress Oberliga SQL Injection

Exploit Title : Wordpress oberliga theme Sql Injection Author : Ashiyane Digital Security Team Discovered By : sil3nt Home : www.ashiyane.org/ Security Risk : High - SQL Injection Dork : inurl:/wp-content/themes/oberligatheme/ajax/team.php Expl0iTs :...

ES CmS 0.1 Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version:...

PHP-Nuke 8.2 SQL Injection

Exploit Title : Nuke 8.2 Modules Bilnd SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://phpnuke.org/ Security Risk : High - Bilnd SQL Injection Version : All Version Dork :...

ES CMS 0.1 SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

ES CmS 0.1 - SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

ES CmS 0.1 - SQL Injection

ES CmS 0.1 - SQL Injection Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc...

Army Ezine Colombia XSS / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: http://cyberpunk-ur0x.blogspot.com/ Exploit Title: Army Ezine Colombia - SQL...

Wordpress Plugin plg_novana Sql Injection Vulnerability

WordPress Plg Novana third party plugin suffers from a remote SQL injection vulnerability. Exploit Title : Wordpress plgnovana plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Discovered By : sil3nt Home : www.ashiyane.org Security Risk : High - SQL Injection Dork :...

WordPress Zingiri Web Shop 2.5.0 Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...

WordPress Plg Novana SQL Injection

Exploit Title : Wordpress plgnovana plugin Sql Injection Exploit Author : Ashiyane Digital Security Team Discovered By : sil3nt Home : www.ashiyane.org Security Risk : High - SQL Injection Dork : inurl:/plugins/plgnovana/novanadetail.php Expl0iTs :...

WordPress Zarzadzanie Kontem Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress zarzadzaniekontem Plugin | Arbitrary File Upload Vulnerability | Google Dork: inurl:"/wp-content/plugins/zarzadzaniekontem/" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on:...

Webthinkers Cross Site Scripting / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Exploit Title: Webthinkers - SQL Injection / Cross-Site Scripting Vulnerabilities Dork:...

WordPress Madebymilk SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress madebymilk Theme SQL Injection | Google Dork: inurl:/madebymilk/voting-popup.php | Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress List Communities SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress listcommunities SQL Injection | Google Dork: inurl:/listcommunities/communityprofile.php| Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

Joomla Component com_autostand shell upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comautostand file upload Author: Over-X email: email protected Vendor or Software Link: forum.joomla.org Version: v3 Google dork: "inurl:comautostand" Tested on: win Xp...

Prodware (page.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Prodware page.php SQL Injection Vulnerability Date: 11-11-2012 Author: Mouh Marvel-Dz Facebook : http://www.facebook.com/mouh.marvel Category: webapps Google dork: intext:"Designed by Prodware" inurl:page.php?subcat= Tested on:...

WordPress Kakao Theme SQL Injection

Exploit Title : Wordpress theme kakao Sql Injection Author : Iranian DataCoders Security Team Discovered By : sil3nt Home : www.datacoders.org/ Security Risk : High - SQL Injection Dork : inurl:themes/wilderness/gallery.php Expl0iTs : Target/wp-content/themes/kakao/sonHaberler.php?ID=sql D3m0 :...

WordPress Calendar-Script Blind SQL Injection

Exploit Title: Wordpress Calendar-Script Plugin Blind SQL Injection Vulnerability Google Dork: inurl:"/Calendar-Script/load.php?cid=1" or "intext:Copyright phpcalendarscripts.com ©" Exploit Author: Ashiyane Digital Security Team Vendor Homepage: http://phpcalendarscripts.com/ Tested on: Windows 7...