Joomla com_joomtouch LFI

Exploit for php platform in category web applications Exploit Title: Joomla comjoomtouch LFI Version: 1.5 Google d0rk: inurl:comjoomtouch Tested on: B.T-5 Windows 7 Windows Xp Sp3 Fr Exploit :...

StartSite.ir Cross-site Scripting Vulnerability

------------In The Name Of God------------ StartSite.ir Cross-site Scripting Vulnerability AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Forum: http://ajaxtm.com/forum Google D0rk: "Powered by StartSite.ir" xss EXPLOIT: scriptalert/0//script script...

Creator CMS 5.0 (sideid) Remote SQL Injection Vulnerability

No description provided by source. Exploit : Creator CMS 5.0 Remote SQL Injection Vulnerability Vendor : www.cmind.dk Founded By : ThE X-HaCkEr From X9 Team ThE X-HaCkEr & dr.9 Greetz To : tryag.cc & saudihack.com & hackteach.org all muslim Email : [email protected] Google D0rk :...

Creator CMS 5.0 (sideid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Creator CMS 5.0 sideid Remote SQL Injection Vulnerability =========================================================== Exploit : Creator CMS 5.0 Remote SQL Injection Vulnerability...

Creator CMS 5.0 - 'sideid' SQL Injection

Exploit : Creator CMS 5.0 Remote SQL Injection Vulnerability Vendor : www.cmind.dk Founded By : ThE X-HaCkEr From X9 Team ThE X-HaCkEr & dr.9 Greetz To : tryag.cc & saudihack.com & hackteach.org all muslim Email : [email protected] Google D0rk : allinurl:index.asp?sideid= POC :...

RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability

SalesCart Shopping Cart - SQL Injection Vulnerability SalesCart does not sanitize any forms in cgi-bin/reorder2.asp, allowing an attacker to inject arbitrary SQL queries, as well as possible command execution. Google d0rk: "Sorry, you have no Items in your Shopping Cart !" inurl:cgi-bin/view1.asp...

wiys10-xss.txt

WIYS v1.0 Cross-Site Scripting Vulnerability - 05.24.2007 NEW Vulnerability: http://www.target.com/index.php?Page=Sayfa&No="alertdocument.cookie Vulnerable: WIYS v1.0 Google d0rk: Bu site FORSNET tarafýndan WÝYS Yazýlýmý™ ile hazýrlanmýþtýr. Script : http://www.forsnet.com.tr/yazilim/wiys.html...

psychostats-xss.txt

PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities PsychoStats contains multiple cross-site scripting vulnerabilities that may be exploited through the URI. Vulnerable Files: awards.php, login.php, register.php, weapons.php - other files may also be susceptible to this vulnerabilit...

hlstats-xss.txt

HLstats v1.35 Cross-Site Scripting Vulnerability HLstats contains a cross-site scripting vulnerability that may be exploited through the URI. Vulnerability: http://target.com/hlstats/hlstats.php/"alert1 Vulnerable: HLstats v1.35 other versions may also be vulnerable Google d0rk: "generated in...

podium-cookie.txt

Podium CMS - Cookie Manipulation Exploit Podium CMS - Cookie Manipulation Exploitdiscovered by John MartinelliGoogle d0rk: inurl:"podium/Default.aspx" "...

cubecart-crlf.txt

Note to BugTraq: Forgot to tell which files are vulnerable. Sorry! CubeCart v3.0.15 - CRLF Injection Vulnerability It is possible to set the cookie prefixed with ccSID to cause CRLF injection. Vulnerable files: cart.php, index.php HTTP Request: ------------- GET / HTTP/1.0 Accept: / User-Agent:...

Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit

!-- Ripe Website Manager = 0.8.4 - SQL Injection Vulnerability and Cross-Site Scripting Exploit Vulnerable Variable: ripeformpost Cross-Site Scripting and SQL Injection possible Vulnerable File: contact/index.php Vulnerable: Ripe Website Manager = 0.8.4 Google d0rk: "Powered by Ripe Website...

galix.txt

GaliX² v2.0 - Cross-Site Scripting Exploit GaliX² v2.0 - Cross-Site Scripting Exploitdiscovered by John MartinelliGoogle d0rk: "GaliX² v2.0" alert1;"...

action-rfi.txt

-------------------------------------------------- ActionPoll Script actionpoll.php Remote File Include -------------------------------------------------- Author : SekoMirza Date Found : April 14 2007 Location : French // ... Critical Lvl : critical Impact : System access Where : From Remote...

codebreak.txt

http://john-martinelli.com/work/codebreak.txt CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerabilitydiscovered by John MartinelliGoogle d0rk: intitle:"CodeBreak - Hidden Morse Code"...

CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability

http://john-martinelli.com/work/codebreak.txt !-- CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability Google d0rk: intitle:"CodeBreak - Hidden Morse Code" Vulnerable Code: include$POST"processmethod" . "" . $POST"outputmethod" . ".inc"; John Martinelli [email protected]...

GeekLog <= 2. (BaseView.php) Remote File Include Vulnerabilities

GeekLog = 2. BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php require $glConf'pathlibraries'...

geeklog-rfi.txt

GeekLog = 2. BaseView.php Remote File Include Vulnerabilities Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://www.geeklog.net/nightly/geeklog2-cvs-nightly.tar.gz V.CODE: In : path/system/libraries/Geeklog/MVCnPHP/BaseView.php require $glConf'pathlibraries'...

Geeklog 2 (BaseView.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Geeklog 2 BaseView.php Remote File Inclusion Vulnerability ============================================================ GeekLog = 2.x BaseView.php Remote File Include...

ArticleBeach Script 2.0 - index.php Remote File Inclusion

ArticleBeach Script 2.0 - index.php Remote File Inclusion ------------------------------------------------------------------------------ ArticleBeach Script = 2.0 page Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni...