Site2nite Vacation Rental (VRBO) Listings SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Vacation Rental VRBO Listings SQL injection Vulnerability Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe,...

GeekLog 1.7.0 - 'FCKeditor' Arbitrary File Upload

db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 88""""""""88 88 88888 d8""""""""8b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 "Y88888P" Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net/ Version: 1.7....

Ease Jukebox v1.30 Denial of Service Vulnerability

Exploit for windows platform in category dos / poc ==================================== Ease Jukebox v1.30 Denial of Service ==================================== Exploit Title :Ease Jukebox 1.30 Dos vulnerability Software : Ease Jukebox 1.30 Software link :...

MAP Category SQL Injection

======================================================= MAP Category map.php SQL Injection Vulnerability ======================================================= Exploit Title: PHP Category map.php?id SQL Injection Vulnerability Date: oktober 02, 2010 Author: josalijoe Category? : PHP Category...

PHP Category SQL Injection

======================================================= PHP Category categoryid SQL Injection Vulnerability ======================================================= Exploit Title: PHP Category categoryid SQL Injection Vulnerability Date: oktober 02, 2010 Author: josalijoe Category? : PHP Category...

jCart 1.1 Cross Site Request Forgery / Cross Site Scripting

additem$itemid, $itemqty, $itemprice, $itemname; ------------------------- User-supplied input for variable $itemname isn't properly escaped. Proof-of-Concept: -- alertdocument.cookie" type="hidden" document.getElementById'payload'.click...

SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits ================================================================= SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH ================================================================= Exploit Title: SnackAmp 3.1.3B Malicious SMP...

WAnewsletter 2.1.2 - SQL Injection

================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author: [email protected] Software...

Fashione E-Commerce Webshop SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: Fashione E-Commerce Webshop Multiple SQL Injection Vulnerabilities Date: 2010-09-19 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site : swissfaking.net/board Software Link: http://www.fashione.co.uk/ Version: All...

BoutikOne 1.0 - SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: BoutikOne® v1 list.php SQL Injection Vulnerabilitie Date: 19/09/2010 Author: BrOx-Dz Author: [email protected] Software Link: http://www.boutikone.com/ Dork : Powered by BoutikOne® Version: BoutikOne® Tested on: windows xp pack 3...

Pc4Uploader 9.0 Cross Site Request Forgery

Exploit Title: pc4uploader XSRF Add Admin Exploit Date: 27-08-2010 Author: RENO TeaM : SauDi ViRuS TeaM SiTe: WwW.Sa-ViRuS.CoM Software Link: http://www.pc4arb.com/product-10.html SvT Pc4Uploader - XSRF Add Admin Exploit Author : RENO TeaM : SauDi ViRuS TeaM Site : WwW.Sa-ViRuS.CoM Email :...

iGaming CMS - Multiple SQL Injections

Exploit Title: iGamingCMS1.5 multiple vulnirabilities Date: 27/08/2010 Author: Sweet Contact : [email protected] Software Link: http://www.igamingcms.com/ Download: http://forums.igamingcms.com/forumdisplay.php?f=5 Version:1.5 Tested on: WinXp sp3 Risk : hight...

Adobe Dreamweaver CS4 - 'ibfs32.dll' DLL Hijacking

/ Exploit Title: Adobe Dreamweaver CS4 DLL Hijacking Exploit ibfs32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: 10.0 Build 4117 Tested on: Windows 7 Ultimate x86 Vulnerable extensions: .asp .asa. aspx .php .php5 .cfm .tpl .asr .jsp etc Greetz:...

Ananta Gazelle CMS Multiple Vulnerabilities

Exploit for php platform in category web applications =========================================== Ananta Gazelle CMS Multiple Vulnerabilities =========================================== Exploit Title: AnantaGazelle Local File inclusion / Xss Vulnerabilities Date: 23/08/2010 Author: Sweet Contact ...

Karaoke Video Creator Denial Of Service

Exploit Title: Karaoke Video Creator Denial of Service Vulnerability Author: PASSEWORD Date: 2010-08-20 Software Link: http://www.powerkaraoke.com/src/prod-karaoke-video-creator.php Version : 2.2.8 Greetz 2 : d4rk-h4ck3r , And All Muslims And Tunisian Hackers Tested on: Windows XP SP3 Fr $buff="A...

Windows Live Messenger <= 14.0.8117 Animation Remote Denial of Service

No description provided by source. Exploit Title: Windows Live Messenger = 14.0.8117 animation remote Denial of Service Date: 11/08/2010 Author: TheLeader Email: gsog2009 a7 hotmail d0t com Software Link: http://explore.live.com/windows-live-messenger Version: 14.0.8117 and prior Tested on: Windo...

Kleeja Upload - CSRF Change Admin Password

Exploit for php platform in category web applications ========================================== Kleeja Upload - CSRF Change Admin Password ========================================== Exploit Title: Kleeja Upload - CSRF Change Admin Password Date: 11-08-2010 Author: KOLTN & email protected Softwar...

Tycoon Record Script 1.0.9 SQL Injection

% TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | Exploit---------------------------------- 0x1: Goto...

Tycoon CMS Record Script 1.0.9 - SQL Injection

Tycoon CMS Record Script 1.0.9 - SQL Injection % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0...

FathFTP 1.8 - 'EnumFiles Method' ActiveX Buffer Overflow (SEH)

' Exploit Title: FathFTP 1.8 SEH EnumFiles ActiveX Buffer Overflow ' Author: MadjiX ' Software Link: http://www.fathsoft.com/fathftp.html ' Version 1.7 : http://www.exploit-db.com/exploits/14269/ Thanks Blake ' RasIsConnected 1.8 : http://www.exploit-db.com/exploits/14539/ ' Tested on: Windows XP...