Webcat Multiple Blind SQL Injection Vulnerabilities

No description provided by source. Exploit Title: Webcat - Two Blind SQL Injection Vulnerabilities Google Dork: allinurl: scwebcat/ecat/cmsview.php Date: 6/23/2011 Author: w0rd w0rdatNULL0x00.com Software Link: http://webcat.sourceforge.net/ Tested on: Linux/Windows 7 Vulnerable Parameters: webid...

web calendar system <= 3.40 (xss/sql) Multiple Vulnerabilities

No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...

fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: powered by fuzzylime | | | | author: [email protected] | | homepage...

Tech Shop Technote 7 SQL Injection Vulnerability

No description provided by source. Exploit Title: Technote7Commercial Version, Free Version == SQL Injection Vulnerabilities Google Dork: inurl:/technote/board.php?category= Date: 2011/01/02 Author: MaJ3stYhttp://maj3sty.tistory.com Language : PHP Software Link:...

IndexScript <= 2.8 (show_cat.php cat_id) SQL Injection Vulnerability

No description provided by source. Site: http://indexscript.com Found By: xssvgamer Google Dork: allintext: This site is powered by IndexScript exploit: http://www.example.com/showcat.php?catid=-1 UNION ALL SELECT login,password FROM dirlogin / Blind SQL injection in indexscript.. Vul Code: $sql ...

JTL-Shop 2 (druckansicht.php) SQL Injection Vulnerability

No description provided by source. JTL-Shop 2 druckansicht.php SQL Injection Vulnerability author : Lo$T Home : www.sa-hacker.com/vbhttp://www.sa-hacker.com/vbhttp://www.sa-hacker.com/vb + www.sec-eviles.com/vbhttp://www.sec-eviles.com/vb email : [email protected]:[email protected] Dork : Powered by...

tsep <= 0.942.02 Multiple Vulnerabilities

No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: powered by TSEP - The Search Engine Project ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...

X7 Chat <= 2.0.1A1 (mini.php help_file) Local File Inclusion Vulnerability

No description provided by source. ==================================================================== o X7 Chat = 2.0.1A1 Local File Inclusion Vulnerability Software : X7 Chat version 2.0.5.1 Vendor : http://x7chat.com/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

pollxt Mambo Component <= 1.22.07 Remote Include Vulnerability

No description provided by source. Application : pollxt mambo Component URL : http://www.mamboxt.com Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/compollxt/conf.pollxt.php on line 1-2...

SOOP Portal Raven 1.0b SQL Injection Vulnerability

No description provided by source. Exploit Title: SOOP Portal Raven 1.0b sql injection Google Dork: Powered by SOOP Portal Raven 1.0b Date: date Author: Evil-Thinker Version: Raven 1.0b Tested on: Windows Soft Technologie : ASP.net Exploit Details :...

SIDA University System SQL Injection Vulnerability

No description provided by source. Author: K053 K053.dev0te3 at gmail Vendor : SIDA http://91.98.156.224/ Version: All below 1389 are vulberable ==================================================================================== Note: Seems vendor patched this vulnerability in newest update 1389...

ATutor <= 1.6.1-pl1 (import.php) Remote File Inclusion Vulnerability

No description provided by source. ATutor Course Server Rfi AUTHOR : IRCRASH R3d.W0rm Discovered by : IRCRASH R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Script Download : www.atutor.ca DORK : Web site engine's code is copyright © 2001-2007 ATutor® Note : You...

Wordpress PICA Photo Gallery Plugin 1.0 - Remote File Disclosure

No description provided by source. Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Date : 30-05-2012 Google...

SQLiteManager 1.2.4 - Remote PHP Code Injection Vulnerability

No description provided by source. Description: =============================================================== Exploit Title: SQLiteManager 0Day Remote PHP Code Injection Vulnerability Google Dork: intitle:SQLiteManager inurl:sqlite/ Date: 23/01/2013 Exploit Author: RealGame Vendor Homepage:...

XCMS <= 1.83 Remote Command Execution Exploit

No description provided by source. Name : XCMS = v1.83 Remote Command Execution Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.xcms.it Date : 28/12/2007 Dork : inurl:mod=notizie The xcms's footerthat is in /dati/generali/footer.dtb is...

EasyPage SQL Injection Vulnerability

No description provided by source. Title : EasyPage SQL Injection Vulnerability Author : Red Security TEAM Date : 19/01/2012 Risk : High Vendor : http://karait.com/ Tested On : Windows Server 2008 Microsoft-IIS/7.5 Dork : inurl:default.aspx?page=Document&app=Documents&docId= Contact : Info 4t...

SiteGenius Blind SQL injection Vulnerability

No description provided by source. ===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL...

WordPress Occasions Plugin 1.0.4 - CSRF Vulnerability

No description provided by source. html !-- Exploit Title: WordPress Occasions Plugin 1.0.4 CSRF Google Dork: inurl:/wp-content/plugins/occasions Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/occasions/ Softwa...

GameSiteScript <= 3.1 (profile id) Remote SQL Injection Vulnerability

No description provided by source. GameSiteScript Profile$id SQL-Injection Exploit Vulnerability Discovered By: Xenduer77 ---July 7th, 2007 $id Is passed straight to the query without being filtered. SQL-INJECTION: For Version 3.1: -------...

Joomla Component com_acstartseite SQL Injection Vulnerability

No description provided by source. Joomla Component comacstartseite Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Bug Type : Sql InjectionMysql .:. Dork :...