Opencart 1.1.8 - 'route' Local File Inclusion

+=================================================================+ xTitle : Opencart Lfi Injection Vulnerability xSoftware : OpenCart opencartv1.1.8 xVendor : http://www.opencart.com/ xDate : 25 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog : http://oonboy.blogspot.co...

Opencart 1.1.8 (route) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Opencart 1.1.8 route Local File Inclusion Vulnerability ========================================================= +=================================================================+...

Opencart 1.1.8 - route Local File Inclusion

Opencart 1.1.8 - route Local File Inclusion +=================================================================+ xTitle : Opencart Lfi Injection Vulnerability xSoftware : OpenCart opencartv1.1.8 xVendor : http://www.opencart.com/ xDate : 25 April 2009 Indonesia xAuthor : OoNBoy xContact :...

Opencart 1.1.8 Local File Inclusion

+=================================================================+ xTitle : Opencart Lfi Injection Vulnerability xSoftware : OpenCart opencartv1.1.8 xVendor : http://www.opencart.com/ xDate : 25 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog : http://oonboy.blogspot.co...

Joomla! Component rsmonials - Cross-Site Scripting

Joomla! Component rsmonials - Cross-Site Scripting / RSMonials XSS Exploit http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component Google Dork: allinurl:option=comrsmonials Anything entered into the form gets rendered as HTML, so you can ad...

Joomla Component rsmonials Remote Cross Site Scxripting Exploit

No description provided by source. / RSMonials XSS Exploit http://www.rswebsols.com/downloads/category/14-download-rsmonials-all?download=23%3Adownload-rsmonials-component Google Dork: allinurl:option=comrsmonials Anything entered into the form gets rendered as HTML, so you can add tags as long a...

Seditio CMS Events Plugin (c) Remote SQL Injection Vulnerability

No description provided by source. +=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContac...

Seditio CMS Events SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Seditio CMS Events Plugin - 'c' SQL Injection

+=================================================================+ xTitle : Seditio Events Remote SQL Injection Seditio Events Plugin Remote SQL Injection xSoftware : Seditio CMS xVendor : www.neocrome.ne xDate : 17 April 2009 Indonesia xAuthor : OoNBoy xContact : [email protected] xBlog :...

Jamroom 4.0.2 - t Local File Inclusion

Jamroom 4.0.2 - t Local File Inclusion o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamro...

Jamroom 4.0.2 - 't' Local File Inclusion

o-----------------------------------------------------------------------------------------------------------------x | Local File Include Vulnerability | o------------------------------------------------------------------------------------o | Software : Jamroom version 3.1.2 , 3.2.3 , 3.2.4 , 3.2....

Turnkey Ebook Store 1.1 Cross Site Scripting

Turnkey Ebook Store v1.1 - Cross site Scripting and Redirect Link: http://www.privatelabelresellrights-store.com/ebookstore/ - 31-03-2009 - Methodman - http://nemesis.te-home.net - Vulnerability was found on search module. example: - http://site.com/index.php?cmd=search&keywords="alert'XSS' -...

iWare CMS 5.0.4 - Multiple SQL Injections

iWare CMS 5.0.4 - Multiple SQL Injections CMS IWARE 5.0.4 REMOTE SQL-injection vulnerability Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Remote SQL-injection Google Dork : N/W -------------------------------------------------- ! Product Site : www.iwarecms.nl ! Download...

glFusion <= 1.1.2 COM_applyFilter()/order SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== glFusion = 4.1 php.ini independent google dork: "Page created in" "seconds by glFusion" +RSS Vulnerability, sql injection in 'order' and 'direction' arguments: look...

PhotoStand 1.2.0 - Remote Command Execution

PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...

WordPress Plugin fMoblog 2.1 - 'id' SQL Injection

Wordpress Plugin fMoblog Remote SQL Injection Vulnerability Plugin Home: http://www.fahlstad.se/wp-plugins/fmoblog/ Plugin Version: 2.1 Author: strange kevin Email: [email protected] Google Dork: "Gallery powered by fMoblog" Exploit:...

Qwerty CMS (id) Remote SQL Injection Vulnerability

No description provided by source. QWERTY CMS SQL Injection. www.turkguvenligi.info / [email protected] t4cs1zkr4L - Agdscorp - TheHacker - Fatih - SuSkuN - Zec - DreamTurk - Mr.SheYtaN - Ghost61 - BLaSteR - Desquner - s3fa CMS PAGE : http://web-sites.kiev.ua GOOGLE DORK :...

Qwerty CMS - id SQL Injection

Qwerty CMS - id SQL Injection QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP:...

Qwerty CMS (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== Qwerty CMS id Remote SQL Injection Vulnerability ================================================== QWERTY CMS lite - SQL INJ = Injection in index.php variable: id...

Qwerty CMS - 'id' SQL Injection

QWERTY CMS lite - SQL INJ Found: b3 from GraBBerZ.com = Injection in index.php variable: id http://site/index.php?act=publ&id=-3+UNION+SELECT+1,2,3,4,5 = Administrator Table: rkh8t5po Columns: secret873ktlW,pass459khyf Column with pass: pass459khyf Admin CP: /admin/admin.php = CMS PAGE :...