SPIP CMS 2.x / 3.x Add Administrator / File Upload

Exploit Title : Spip CMS 2.x/3.x Add Administrator Account & Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Published Date : 26/03/2019 First Discovered Date : 2013 - 2014 Vendor Homepage : spip.net Software Download Links :...

ProjectSend r754 - Insecure Direct Object Reference

Document Title: =============== ProjectSend r754 - IDOR & Authentication Bypass Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2031 Release Date: ============= 2017-02-21 Vulnerability Laboratory ID VL-ID:...

Joomla Component DBQuery <= 1.4.1.1 RFI Vulnerability

No description provided by source. @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...

Joomla Component alphacontent <= 2.5.8 (id) SQL Injection Vulnerability

No description provided by source. Joomla Component comalphacontent SQL Injection Vulnerability found by: cO2 Algeria Security Crew Contact: c02athotmail.de Website: http://www.dzw0rm.ch Greetings: to all hackers DZ ScriptName : 'Joomla' ModuleName : 'AlphaContent' Version : '2.5.8 ' DORK 1 :...

Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...

logahead UNU edition 1.0 - Remote Upload File / Code Execution Vuln

No description provided by source. -=--------------------ADVISORY-------------------=- logahead UNU edition 1.0 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: logahead UNU edition -=+ Version: 1.0 -=+ Vendor's URL: http://typo.i24.cc/logahea...

Mambo Component EstateAgent 0.1 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomestateagent AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorK 1 : allinurl: allinurl: comestateagent EXPLOIT :...

PHP Weby Directory Software 1.2 SQL Injection / CSRF Vulnerabilities

PHP Weby Directory Software version 1.2 suffers from cross site request forgery and remote blind SQL injection vulnerabilities. =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download:...

PHP Weby Directory Software 1.2 SQL Injection / Cross Site Request Forgery

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

Vulnerability Description: XSS-&#40;CROSS SITE SCRIPTING VULNERABILITIES&#41; &#40;ZAPHOD BREEBLEBROX&#39;S BLOCKER A.K.A. ZB BLOCK&#41;

-------------------------------------------------------------------------------------------------------------------- Vulnerable Software: // ZAPHOD BREEBLEBROX'S BLOCKER A.K.A. ZB BLOCK // VERSION 0.4.9 Final "Jaguar" 0.4.9Final Developed by HTTP://WWW.SPAMBOTSECURITY.COM...

[DCA-2011-0014] - Elxis CMS Cross Site Script

Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - Elxis CMS Vendor Product Description - Elxis is powerful open source content management system CMS released for free under the GNU/GPL license. It has unique multi-lingual features, it follows W3C...

Puntal 2.1.0 - Remote File Inclusion

==================================================== Puntal 2.1.0 Remote File Inclusion Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ ...

Joomla! Component com_album 1.14 - Directory Traversal

Joomla Component comalbum Directory Traversal Vuln version Album 1.14 Author : DreamTurk mail : [email protected] home page : www.turkguvenligi.info Down : http://www.breedveld.net/index.php?option=comremository&Itemid=193&func=startdown&id=1 exp :...

Joomla Component Akobook 2.3 (gbid) SQL Injection Vulnerability

No description provided by source. Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example:...

Joomla! Component Akobook 2.3 - gbid SQL Injection

Joomla! Component Akobook 2.3 - gbid SQL Injection Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example:...

Joomla Component Akobook 2.3 (gbid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component Akobook 2.3 gbid SQL Injection Vulnerability =============================================================== Joomla Component comakobook Vulnerability...

Joomla! Component Akobook 2.3 - &#039;gbid&#039; SQL Injection

Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example: http://localHost/path/components/index.php?option=comakobook&Itemid=36= SQL code Demo...

Joomla Akobook 2.3 SQL Injection

Joomla Component comakobook Vulnerability ---------------------------------------------------------------------- + Author : Ab1i + Email : [email protected] + Dork : inurl:index.php?option=comakobook Example: http://localHost/path/components/index.php?option=comakobook&Itemid=36= SQL code Demo...

Joomla Component com_school 1.4 (classid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Joomla Component comschool 1.4 classid SQL Injection Vulnerability =====================================================================...

Joomla! Component com_school 1.4 - classid SQL Injection

Joomla! Component comschool 1.4 - classid SQL Injection ---------------------------------------------------------------------- Joomla Component comschool classid SQL injection Vulnerability ---------------------------------------------------------------------- + Author : Chip D3 Bi0s + Email :...