PT-2012-1055

Name of the Vulnerable Software and Affected Versions Smokeping versions 2.4.2 through 2.6.6 Description The issue concerns multiple vulnerabilities in the Smokeping package of the Debian GNU/Linux operating system, which can lead to a breach of protected information integrity. These...

PHP Membership Site Manager Script Cross Site Scripting

Exploit Title: PHP Membership Site Manager Script Date: 14/01/2012 Author: Atmon3r Discovered By: Atmon3r Software Link: http://www.e-soft24.com/php-membership-site-manager-script-p-74.html Version: All Version Security Risk:: Low Tested on: GNU/Linux Ubuntu Exploit:...

Annuaire PHP Cross Site Scripting

Exploit Title: Annuaire php Date: 16/01/2012 Author: Atmon3r Discovered By: Atmon3r Software Link: http://www.annuairephp.com/ Version: All Version Security Risk:: Low Tested on: GNU/Linux Ubuntu Exploit: http://www.website.com/path/referencement/sitesinscription.php?nom=xss&url=xss Demo:...

PT-2012-1043

Name of the Vulnerable Software and Affected Versions Super versions 3.30.0 Description The issue concerns multiple vulnerabilities in the Super package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity, and...

AiDesign SQL Injection

Exploit Title: AiDesign SQL Injection Vulnerability Google Dork: "Powered by: AiDesign" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Twoja Witryna CMS SQL Injection

Exploit Title: Twoja Witryna CMS SQL Injection Vulnerability Google Dork: "Powered by: Twoja Witryna" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on...

Luxun CMS SQL Injection

Exploit Title: Luxun CMS SQL Injection Vulnerability Google Dork: "powered by luxun" Date: 7/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.marinet.gr Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

IRIS SQL Injection

Exploit Title: IRIS SQL Injection Vulnerability Google Dork: intext:"Powered by iris" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.iris.tn Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

CommonSense CMS Blind SQL Injection

Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on:...

EasyWebRealEstate blind defect and repair-vulnerability warning-the black bar safety net

Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team farbodmahini badguest. cnwww. badguest. cn WwW.H4ckCity.Org Software address: www.easywebrealestate.com Affects all version: All Version Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Example...

CommonSense CMS script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Versi...

Mediashaker blind defect and repair-vulnerability warning-the black bar safety net

Title: Mediashaker Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team www.badguest.cnWwW.H4ckCity.Org Affect all versions Developer: http://www.mediashaker.com/ Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Sample test http://www.badguest.cn /content. php? id=1 Blind S...

EasyWebRealEstate Blind SQL Injection

Exploit Title: EasyWebRealEstate Blind SQL Injection Vulnerabilitiy Google Dork: inurl:listings.php "Powered by EasyWebRealEstate" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.easywebrealestate.com Version: All Version...

Mediashaker Blind SQL Injection

Exploit Title: Mediashaker Blind SQL Injection Vulnerabilitiy Google Dork: inurl:content.php "Powered by Mediashaker" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

immediaC CMS SQL Injection

Exploit Title: immediaC CMS SQL Injection Vulnerabilitiy Google Dork: "Powered by immediaC" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.immediac.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

Posse Sports SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

SyriaNobles SQL Injection

Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubun...

Biz Technologies SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Biz Technologies SQL Injection Vulnerabilitiy Google Dork: inurl:gallery.php "Powered by Biz Technologies" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

Mediashaker Blind SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Mediashaker Blind SQL Injection Vulnerabilitiy Google Dork: inurl:content.php "Powered by Mediashaker" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version...

Posse Softball Director CMS SQL Injection Vulnerabilitiy

Exploit for php platform in category web applications Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All...