Teampass <= v2.1.6 Arbitrary File Upload / Export decrypt passwords

Exploit for php platform in category web applications Vendor or Software Link: https://github.com/nilsteampassnet/TeamPass Version: connect; // Get all accounts $rows = $db-fetchallarray" SELECT i.id AS id, i.restrictedto AS restrictedto, i.perso AS perso, i.label AS label, i.description AS...

E107 1.0.0 Flexicontent SQL Injection

Exploit Title : E107 1.0.0 Component comflexicontent Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://e107.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7...

SMF 2.0.2 Cross Site Scripting

Exploit Title : SMF 2.0.2 Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.simplemachines.org Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Dcommunication SQL Injection

Exploit Title : dcommunication Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.dcommunication.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "d...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

Rivettracker 1.03 - Multiple SQL Injections

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user...

Refinery CMS Cross Site Scripting

------------------------------------------------------------------------------------------------------------- -Exploit Title : RefineryCMS Admin GUI / reset password field input - Cross-Site Scripting Vulnerabilitiy - -Vendor : Refinery CMS - Refinery - -Homepage : http://refinerycms.com/ - -Auth...

Online-Development CMS Cross Site Scripting

Exploit Title : Online-Development Cms Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.onlinedevelopment.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows...

starCMS Cross Site Scripting

Exploit Title : starCMS Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.starcms.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "powered ...

libpng chunk decompression integer overflow vulnerability

Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

AgentImage CMS SQL Injection

Exploit Title : AgentImage Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Jokers Home : http://IrIsT.Ir Software Link : http://www.agentimage.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Agent Image"...

Boomge Search Cross Site Scripting

Exploit Title : boomge Search Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.boom.ge Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "boom ge" Expl0iTs ...

4PSA CMS - SQL Injection

Exploit Title: 4PSA CMS SQL Injection Vulnerabilities Google Dork: "Communications solution from 4PSA." Date: 2012/02/19 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite:WwW.Black-hg.Org Software Link: http://www.4psa.com/ Version: Last Version Security...

4PSA CMS - SQL Injection

4PSA CMS - SQL Injection Exploit Title: 4PSA CMS SQL Injection Vulnerabilities Google Dork: "Communications solution from 4PSA." Date: 2012/02/19 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite:WwW.Black-hg.Org Software Link: http://www.4psa.com/ Version:...

Rocketwebco SQL Injection

Exploit Title : rocketwebco Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.rocketwebco.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "site by rocket web consulting"...

Abbott Web Experts SQL Injection

Exploit Title : abbottwebexperts Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://abbottwebexperts.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered by Abbott Web...

Fatheads SQL Injection

Exploit Title : fatheads Sql Injection Vulnerabilitiy Author : IrIsT Team Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.fatheads.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Designed and developed by Fat...

Fink Project Cross Site Scripting

Exploit Title : finkproject Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://finkproject.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

Grady Levkov Cross Site Scripting

Exploit Title : Grady Levkov Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://gradylevkov.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Grady Levkov &...