Webmobo WB News System Blind SQL Injection

No description provided by source. Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page:...

P-Chat 0.9 Cross Site Scripting

Exploit Title: P-Chat v0.9 XSS Vulnerability Date: 2012 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: index.php XSS Example: "/ XSS Code POC:...

Video Girls BiZ Video Chat Script Cross Site Scripting / SQL Injection

Exploit Title: Video Girls BiZ Video Chat Script - Blind SQL Injection and XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection and XSS can be done using. Vulnerable Page: forum.php...

Social Book Facebook Clone Script Cross Site Scripting

Exploit Title: Social Book Facebook Clone Script Reflected XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: signup.php lostpass.php login.php...

Innovate Portal Cross Site Scripting

Exploit Title: Innovate Portal XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE XSS can be done using the command input Vulnerable Page: index.php Example:...

WebEmlak Real Estate Cross Site Scripting

Exploit Title: WebEmlak Real Estate Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Cross Site Scripting can be done using the URL input Vulnerable Page: index.php Example: index.php/ Exploit:...

Myisoft EasyGallery Cross Site Scripting / SQL Injection

Exploit Title: MYISOFT EasyGallery SQL Injection - Blind SQL Injection - Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection, Blind SQL Injection and XSS can be done using the command input...

Kolifa News System Cross Site Scripting / SQL Injection

Exploit Title: Kolifa News System SQL Injection - Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection and XSS can be done using the command input Vulnerable Page: arama.php iletisim.php...

Webmobo WB News System - Blind SQL Injection

Exploit Title: Webmobo News System Blind SQL Injection Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Blind SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

Gentle Short URL Script Stored Cross Site Scripting

Exploit Title: Gentle Short URL Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Link shorten, send to a victim. Vulnerable Module: Shorten URL Statics The end of the shortened link ! mentions...

Gentle Tell A Friend Script Cross Site Scripting

Exploit Title: Gentle Tell A Friend Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE Cross Site Scripting can be done using the command input Vulnerable Field: First Name Field, Last Name Field,...

AlstraSoft E-Friends Social Networking Script Cross Site Scripting

Exploit Title: AlstraSoft E-Friends Social Networking Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: Article Modules Exploit: "/ POC:...

VicBlog SQL Injection

Exploit Title: VicBlog SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.vicdesigns.com.au Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: index.php Example: index.php?page=posts&tag=...

eShopping Madness Cross Site Scripting

Exploit Title: eShopping Madness Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: search.php Search Modules Exploit: "/ Demo:...

SnowRES - Accommodation Booking System Cross Site Scripting

Exploit Title: SnowRES - Accommodation Booking System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: advancedsearchresult.php Search Modules Exploit: "/ Demo:...

JOT Online Store SQL Injection

Exploit Title: JOT Online Store E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.justonlinetoday.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Vulnerable Page: index.php Example:...

Yaxal Shop Cross Site Scripting

Exploit Title: Yaxal Shop E-Commerce System Stored XSS Date: 2011 Author: Eyup CELIK Software Link: http://www.polyspaston.com/contentshopdirector.php Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page:...

DragDropCart Cross Site Scripting

Exploit Title: DragDropCart E-Commerce System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: search.php yaxaluser.php Example: search.php?search= Exploit: "/...

Bonza Digital Cart Script - SQL Injection

Exploit Title: Bonzo Cart E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example...

JSS-Shop SQL Injection

Exploit Title: JSS-Shop E-Commerce System SQL Injection Date: 2011 Author: Eyup CELIK Software Link: http://www.turnkeycentral.com Version: All Version Tested on: All versions are Vulnerability ISSUE SQL Injection can be done using the command input Example cart.php?pid=&todo=add Exploit:...