Joomla BF Survey Pro 2.13.1 SQL Injection

Exploit Title : Joomla BF Survey Pro Components 2.13.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : tamlynsoftware.com Software Download Link : tamlynsoftware.com/joomla-surveys.html Software Information Link :...

Joomla ComProfiler Community Builder 2.4.0 Database Disclosure / SQL Injection

Exploit Title : Joomla ComProfiler Community Builder Components 2.4.0 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 03/02/2019 Vendor Homepage : joomlapolis.com Software Download Link : joomlapolis.com/downloads Software...

Joomla JooMap 2.0.6 SQL Injection

Exploit Title : Joomla JooMap Components 2.0.6 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 30/01/2019 Vendor Homepage : joomlacode.org Software Download Link : joomlacode.org/gf/download/frsrelease/3734/8340/joomap2.06pre.zip Software Informati...

Joomla RSFirewall 2.11.25 Database Disclosure

Exploit Title : Joomla RSFirewall Components 2.11.25 Database and Password Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 25/01/2019 Vendor Homepage : rsjoomla.com Software Download Link : extensions.joomla.org/extension/rsfirewall/ Software...

Joomla Simple RSS Feed Reader mod_jw_srfr 3.6.0 Open Redirection

Exploit Title : Joomla Simple RSS Feed Reader modjwsrfr 3.6.0 Modules Open Redirect Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/01/2019 Vendor Homepage : joomlaworks.net Software Download Links : joomlaworks.net/downloads/?f=modjwsrfr-v3.6.0j2.5-3.x.zip...

WordPress topcsstools 1.0 Open Redirection / Remote File Inclusion

Exploit Title : WordPress topcsstools Plugins 1.0 Remote File Inclusion and Open Redirect Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/01/2019 Vendor Homepage : wordpress.org - cssgallery.com Software Information Links : cssgallery.com/premium-themes.html ...

Joomla Codextrous B2jcontact 2.1.17 Shell Upload

Exploit Title : Joomla Codextrous ComB2jcontact Components 2.1.17 Shell Upload Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 04/01/2019 Vendor Homepage : codextrous.com/joomla-components/b2j-contact.html + extensions.joomla.org/extension/b2j-contact/ Software...

BTOptions Web Design 1.0 SQL Injection

Exploit Title : BTOptions Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/12/2018 Vendor Homepage : btoptions.com Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0 - WebServer Apache CW...

TotalComfortSolutions Company 1.0 SQL Injection

Exploit Title : TotalComfortSolutions Company 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepages : totalcomfortsolutions.com Tested On : Windows and Linux Exploit Risk : Medium Category : WebApps Version Information : jQuery 1.4.11 - CodeIgniter -...

WordPress cvp-irontec 4.8.3 Shell Upload

Exploit Title : WordPress cvp-irontec Themes 4.8.3 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress 1.2.0 Disclosure

Exploit Title : WordPress CodeCanyon-5293356-Ajax-Store-Locator-Wordpress Plugins 1.2.0 Multiple Vulnerabilities Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 10/12/2018 Vendor Homepage : wordpress.org codecanyon.net/item/ajax-store-locator-v-20/4106209?srank=1 ...

WordPress Real-Estate-Listing-Realtyna-Wpl 4.3.2 Database Disclosure

Exploit Title : WordPress Real-Estate-Listing-Realtyna-Wpl Plugins 4.3.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : realtyna.com wordpress.org/plugins/real-estate-listing-realtyna-wpl/ Software Download...

WordPress TemplateOne 1.0 Database Disclosure

Exploit Title : WordPress TemplateOne Themes 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org dubicars.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Versio...

Siyah Beyaz Bilisim Web Design 1.0 SQL Injection

Exploit Title : Siyah Beyaz BiliAim Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : siyahbeyazbilisim.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version Information :...

WordPress WP Complete Backup 3.0.5 Database Backup Disclosure

Exploit Title : WordPress wp-complete-backup Plugins 3.0.5 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/wp-complete-backup/ Software Download Link :...

Joomla Event Booking 3.8.3 Database Disclosure

Exploit Title : Joomla comeventbooking 3.8.3 Components Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/event-booking/ +...

WordPress Jazzy Forms 1.1.1 Database Backup Disclosure

Exploit Title : WordPress jazzy-forms Plugins 1.1.1 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/jazzy-forms/ Software Download Link :...

WordPress allow-l10n-upload-filename 1.0 Arbitrary File Download

Exploit Title : WordPress allow-l10n-upload-filename 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Low...

WordPress Events Calendar Premium 1.0 Database Disclosure

Exploit Title : WordPress events-calendar-premium Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version...

WordPress pm_market 1.0 Database Backup Disclosure

Exploit Title : WordPress pmmarket Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org power.com.pl Tested On : Windows and Linux Category : WebApps Version...