Joomla! Component JE Classify Ads 1.2 - pro_id SQL Injection

Joomla! Component JE Classify Ads 1.2 - proid SQL Injection Exploit Title: Joomla! Component JE Classify Ads 1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeclassifyads Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Auto 1.5 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/je-auto/ Demo:...

Joomla! Component JE auction 1.6 - 'eid' SQL Injection

Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/auction/je-auction/ Demo:...

Joomla Sponsor Wall 7.0 SQL Injection

Exploit Title: Joomla Component Sponsor Wall 7.0 - SQL Injection Date: 2017-02-11 Home : https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM [email protected] Home : http://persian-team.ir...

Netman 204 - Backdoor Account / Password Reset Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Netman 204 Backdoor and weak password recovery function Google Dork: intitle:"Netman 204 login" Date: 31st Jan 2017 Exploit Author: Simon Gurney Vendor Homepage: blog.synack.co.uk Software Link:...

HelpDeskZ 1.0.2 - (Authenticated) SQL Injection Unauthorized File Download

HelpDeskZ 1.0.2 - Authenticated SQL Injection Unauthorized File Download ''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3;...

HelpDeskZ SQL Injection / File Download

Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...

HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download

''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...

Joomla Store Locator 2.3.1.0 Cross Site Scripting

Exploit Title: Joomla Component Store Locator 2.3.1.0 - Cross-site scripting Date: 2017-1-28 Home : https://extensions.joomla.org/extension/store-locator/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel ...

Joomla! Component JTAG Calendar 6.2.4 - 'search' SQL Injection

Exploit Title: Joomla Component JTAG Calendar 6.2.4 - SQL Injection Date: 2017-1-28 Vender Home : https://extensions.joomla.org/extension/jtag-calendar/ Exploit Author: Persian Hack Team Discovered by : Mojtaba MobhaM Home : http://persian-team.ir/ Tested on: Windows AND Linux Telegram Channel :...

Movie Portal Script 7.36 - Multiple Vulnerabilities

Movie Portal Script 7.36 - Multiple Vulnerabilities Exploit Title : Movie Portal Script v7.36 - Multiple Vulnerability Google Dork : - Date : 20/01/2017 Exploit Author : Marc Castejon Vendor Homepage : http://itechscripts.com/movie-portal-script/ Software Link: http://movie-portal.itechscripts.co...

Diazcreativos Cms Bypass Admin Page Vulnerability

Exploit for php platform in category web applications |=============================================================| |-------------------In The Name Of God------------------------| | | Exploit Title: Diazcreativos Cms Bypass Admin Page Vulnerability | | Exploit Author: Ashiyane Digital Security...

Airbnb Clone Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

Penny Auction Script - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Vulnerability:Profile Arbitrary Shell Upload Google Dork: Penny Auction Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/tibs-eauction/ Script Name: Penny Auction Script Script Buy Now:...

Movie Portal Script 7.35 - SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: Movie Portal Script v7.35 - SQL Injection Web Vulnerability Google Dork: Movie Portal Script Date:11.01.2017 Vendor Homepage: http://itechscripts.com/movie-portal-script/ Tested on: http://movie-portal.itechscripts.com/ Script...

Airbnb Clone Script - Arbitrary File Upload

Airbnb Clone Script - Arbitrary File Upload Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now:...

F3D4İ's Joomla Arbitrary File Upload Vulnerability

1:Search Google Dork and Choose a Target /index.php?option=comfabrik&c=import&view=import&fietype=csv&tableid=0&Itemid=0 upload shell.php or index.html Poc: http://www.localhost.com/media/index.... or http://www.localhost.com/media/shell.php...

Itech Movie Portal Script 7.35 - SQL Injection

Itech Movie Portal Script 7.35 - SQL Injection Vulnerability: Movie Portal Script v7.35 - SQL Injection Web Vulnerability Google Dork: Movie Portal Script Date:11.01.2017 Vendor Homepage: http://itechscripts.com/movie-portal-script/ Script Name: Movie Portal Script Script Version: v7.35 Script Bu...

Airbnb Clone Script - Arbitrary File Upload

Vulnerability:Profile Arbitrary Shell Upload Google Dork: Airbnb Clone Script Date:11.01.2017 Vendor Homepage: http://www.tibsolutions.com/airbnb-clone/ Script Name: Airbnb Clone Script Script Buy Now: http://www.hotscripts.com/listing/airbnb-clone-tibsolutions/ Author: İhsan Şencan Author Web:...

My PHP Dating 2.0 SQL Injection

Vulnerability: My Php Dating 2.0 - SQL Injection Web Vulnerability Google Dork: My Php Dating Date:09.01.2017 Vendor Homepage: http://www.phponlinedatingsoftware.com/demo.htm Tested on: http://www.phponlinedatingsoftware.com/demo/ Script Name: My Php Dating Script Version: 2.0 Script Buy Now:...