Wordpress Theme Fusion Arbitrary File Download Vulnerability

This exploit allows attacker to download any writable file from the server Usage Info Put the path of the file in the file's field of the exploit ,then click "Download" button then you get the file directly Title : Wordpress Theme Fusion Arbitrary File Download Vulnerability Author : Aloulou Date...

DNN (DotNetNuke®) CodeEditor Module Arbitrary File Download Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® CodeEditor Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.mediaant.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...

DotNetNuke ResponsiveSidebar Arbitrary File Download

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Title : DNN DotNetNuke® responsivesidebar Module Arbitrary File Download Vulnerability Author : alieye vendor : http://www.mediaant.com/ , http://store.dnnsoftware.com/ Contact : [email protected] Risk : High Class: Remote Google Dork:...

WordPress bib2html 0.9.3 Cross Site Scripting Vulnerability

WordPress bib2html plugin version 0.9.3 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. |||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress...

WordPress Conversion Ninja Cross Site Scripting Vulnerability

WordPress Conversion Ninja plugin suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data. ++++++++++++++++++++++++ + + Exploit Title: Wordpress Plugin Conversionninja Cross Site Scripting + + Exploit Author: Ashiyane Digital Security Team + + Date:...

phpnuke 8.3 Sql Injection Vulnerability

Exploit for php platform in category web applications author : ali ahmady -- Iranian security researcher email : snip3rirathotmail.com greets : b0x , PhantomX , VIRkid , email protected , zeus REKCAH , milad22 google dork : inurl: modules.php?name=SubmitNews at post review level you can inject...

WordPress bib2html 0.9.3 Cross Site Scripting

|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress bib2html Cross site scripting Vulnerability | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-05-22 | | Vendor Homepage ...

Wordpress Theme Echea Shell Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Theme Echea Shell Upload Vulnerability Author : Aloulou Date : 15/05/2014 Facebook : http://www.facebook.com/Aloulou.TN Email: email protected Vendor : www.themeforest.net Google Dork : inurl:/wp-content/themes/echea/ Tested ...

Enquete yS 1.0 SQL Injection

Enquete yS - Full v. 1.0 POST SQL Injection in Panel Admin Risk: High CWE number: CWE-89 Author: Hugo Santiago dos Santos Contact: [email protected] Date: 08/05/2014 Vendor Homepage: http://phpbrasil.com/script/AG216GUqK7nS/enquete-ys--full-v-10-yourspotcombr Version: v1.0 Tested on: Windows 7...

E-Store (1.0 & 2.0) <= SQL Injection Vulnerability

Exploit Author: Nawaf Alkeraithe ====================================== for "E-store 1.0": Google Dork: "Powered by: PD" inurl:"page.php?id" Vulnerable page: http://target/page.php?id=SQL Injection ====================================== for "E-store 2.0": Google Dork: "Powered by: PD"...

WordPress thecotton Themes Remote File Upload Vulnerability

@@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@...

WordPress Echelon Theme Shell Upload

Exploit Author:Th3 R0cksT3r Exploit Title: WordPress Echelon Theme Shell Upload Date: 25.04.2014 Email: [email protected] Vendor Homepage: http://wordpress.org/ Google Dork: inurl:/wp-content/themes/echelon/ Exploit : ========== "@$uploadfile"; curlsetopt$ch, CURLOPTRETURNTRANSFER, 1;...

csUpload Script Site - Authentication Bypass

Exploit Title: "csUpload Script Site" Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link: http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=12 Version:...

csUpload Script Site - Authentication Bypass

csUpload Script Site - Authentication Bypass Exploit Title: "csUpload Script Site" Authentication Bypass Google Dork: CSUpload.cgi?command= Date: 4/9/2014 Exploit Author: Satanic2000 Vendor Homepage: http://www.cgiscript.net Software Link:...

ICOMM 610 Wireless Modem - CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title : ICOMM 610 Wireless Modem CSRF Vulnerability Google dork : N/A Date : 02/04/2014 Exploit Author : Blessen Thomas Vendor Homepage : http://www.icommtele.com/ Software Link : N/A Version : ICOMM 610 Tested on : Device softwar...

plexusCMS 0.5 - Cross-Site Scripting Remote Shell Credentials Leak

plexusCMS 0.5 - Cross-Site Scripting Remote Shell Credentials Leak Exploit Title: plexusCMS 0.5 XSS Remote Shell Exploit Google Dork: allinurl: plx-storage Date: 22.02.2013 Exploit Author: neglomaniac Vendor Homepage: http://plexus-cms.org/ Version: 0.5 --- FILES backdoor.php simple commend execu...

Chat2 Cross Site Scripting / SQL Injection

Exploit Title: Chat2 Blind SQL Injection Chat2 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Tested on: Windows Category: webapps Google Dork: inurl:"/chatrooms.php" + Exploit SQL: http:///Chat2/jumpin.php URL encoded POST input userid was set to :...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

Ocportal 9.0.11 Cross Site Scripting / Local File Inclusion

Exploit Title: Ocportal 9.0.11 Cross site scripting Ocportal 9.0.11 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://ocportal.com Version : 9.0.11 Tested on: Windows Category: webapps Google Dork: intext:"Powered by ocportal" + Exploit XSS :...

Et-Chat 3.0.7 Password Reset

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...