Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...

Rivettracker 1.03 - Multiple SQL Injections

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...

Refinery CMS Cross Site Scripting

------------------------------------------------------------------------------------------------------------- -Exploit Title : RefineryCMS Admin GUI / reset password field input - Cross-Site Scripting Vulnerabilitiy - -Vendor : Refinery CMS - Refinery - -Homepage : http://refinerycms.com/ - -Auth...

Online-Development CMS Cross Site Scripting

Exploit Title : Online-Development Cms Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.onlinedevelopment.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows...

starCMS Cross Site Scripting

Exploit Title : starCMS Cross-Site Scripting Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.starcms.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "powered ...

libpng chunk decompression integer overflow vulnerability

Overview The libpng library contains an integer overflow vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Portable Network Graphics PNG image format is used as an alternative to other image formats such as the Graphi...

PT-2012-1022

Name of the Vulnerable Software and Affected Versions CVS versions 1.11 through 1.12 Description The issue concerns multiple vulnerabilities in the CVS package of the Debian GNU/Linux operating system, which can be exploited remotely to compromise the confidentiality, integrity, and availability ...

AgentImage CMS SQL Injection

Exploit Title : AgentImage Cms Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Jokers Home : http://IrIsT.Ir Software Link : http://www.agentimage.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Design by Agent Image"...

4PSA CMS SQl injection flaws and fixes-vulnerability warning-the black bar safety net

Title: 4PSA CMS SQL Injection Vulnerabilities Author: BHG Security Center www.2cto.com Nitrojen90 Development program official website: http://www.4psa.com/ Affected version: latest version Risk level: high Testing platform: GNU/Linux - Windows Example: http://www.badguest.cn /print. php? id=SQL...

Boomge Search Cross Site Scripting

Exploit Title : boomge Search Cross Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://www.boom.ge Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "boom ge" Expl0iTs ...

4PSA CMS - SQL Injection

Exploit Title: 4PSA CMS SQL Injection Vulnerabilities Google Dork: "Communications solution from 4PSA." Date: 2012/02/19 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite:WwW.Black-hg.Org Software Link: http://www.4psa.com/ Version: Last Version Security...

4PSA CMS - SQL Injection

4PSA CMS - SQL Injection Exploit Title: 4PSA CMS SQL Injection Vulnerabilities Google Dork: "Communications solution from 4PSA." Date: 2012/02/19 Category : Web Application Author: BHG Security Center Discovered by : Nitrojen90 WebSite:WwW.Black-hg.Org Software Link: http://www.4psa.com/ Version:...

Rocketwebco SQL Injection

Exploit Title : rocketwebco Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.rocketwebco.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "site by rocket web consulting"...

Fatheads SQL Injection

Exploit Title : fatheads Sql Injection Vulnerabilitiy Author : IrIsT Team Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://www.fatheads.co.uk/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Designed and developed by Fat...

Abbott Web Experts SQL Injection

Exploit Title : abbottwebexperts Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir Software Link : http://abbottwebexperts.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered by Abbott Web...

Fink Project Cross Site Scripting

Exploit Title : finkproject Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://finkproject.org/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Expl0iTs :...

Grady Levkov Cross Site Scripting

Exploit Title : Grady Levkov Cross-Site Scripting Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : http://gradylevkov.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Grady Levkov &...

PHP-Fusion 7.02.04 SQL Injection

Exploit Title : PHP-Fusion Sql Injection Vulnerabilitiy Author : Emperor-Team Discovered By : Am!r Home : http://Emperor-Team.Org Software Link : www.php-fusion.co.uk Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Powered by PHP-Fusion"...

Maxxweb CMS SQL Injection

Exploit Title: maxxweb Cms Sql Injection Google Dork: "maxxweb.de Internet-Dienstleistungen" Discovered By: M4sT3r4N0nY Software Link: http://maxxweb.de/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit:...

TND Media CMS SQL Injection

Exploit Title: TND media Cms Sql Injection Google Dork: "TND media webdesign" Discovered By: M4sT3r4N0nY Software Link: http://www.tndmedia.nl/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit: http://target/releases.php?id=S...