x7chat 3.2 Cross Site Scripting

Exploit Title: x7chat 3.2 Cross-Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.x7chat.com Version : 3.2 Tested on: Windows Category: webapps Google Dork: intext:"Powered By X7 Chat" + Exploit : http:///x7chat/ This vulnerability affects /x7chat/. Discovered by:...

Bigace 2.7.5 LFI / XSS / SQL Injection

Exploit Title: Bigace 2.7.5 Blind Sql Injection Bigace 2.7.5 Cross site scripting Bigace 2.7.5 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bigace/files/bigace2.7.5.zip Version : 2.7.5 Tested on: Windows Category: webapps Google Dork:...

ChatNess 2.5 Session Fixation

Exploit Title: ChatNess 2.5 Session Fixation Script Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.chatness.us Version : 2.5 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Chatness" + Exploit : http:///chatness/chatness/chat.php Discovered by: Scripting...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

Square 0.3.1 Cross Site Scripting

Exploit Title: Square 0.3.1 XSS Vulnerability Date: 2014 17 March Author: Dr.3v1l Vendor Homepage: http://readmoresystems.com Version : 0.3.1 Tested on: Windows Category: webapps Google Dork: inurl:"/?s=" + Exploit : http:///square.0.3.1/0.3.1/?s=XSS&submit=Submit&cmd=search + Demo : You can find...

Datalogicco CMS SQL Injection

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...

CNZZ CMS Cross Site Scripting / SQL Injection

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...

Ox Design Cross Site Scripting / SQL Injection

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...

Palms 3.6 Cross Site Scripting

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...

Palms 3.6 SQL Injection

1010101010101010101010101010101010101010101010101 0 0 1 /'\ /' /\ \ 1 0 /\ \ \ /, \ \ \ 0 1 //\ Dr.3v1l 0 1 0WebSecurity.IR 1 0 0 1 + E-Mail : [email protected] 1 0 + Y! : Doctor.3v1l 0 1 1 0 0 1 I'm 3v1l member from BlackDevils B0ys Team 1 0 0 1 1...