WordPress JS Restaurant SQL Injection

Exploit Title : Wordpress JS Restaurant Plugin SQL Injection Vulnerability Author : Ashiyane Digital Security Team Security Risk : HIgh Google Dork : inurl:/wp-content/plugins/js-restaurant/popup.php?restuarantid= Location:site/path/wp-content/plugins/js-restaurant/popup.php?restuarantid=SQLi DEm...

phpVibe 3.1 Disclosure / Remote File Inclusion

Exploit Title: phpVibe 3.1 Multiple Vulnerability Date: 2013-05-07 Author: indoushka Software Link: http://phprevolution.com/ Category: webapps/php Version: 3.1 Price: 40€ Google dork: "Powered by phpVibe v3.1" installation Application error message :...

Xorbin Analog Flash Clock 1.0 For Joomla XSS

==================================================================== Xorbin Analog Flash Clock 1.0 Extension for Joomla Flash-based XSS ==================================================================== Description: This plugin displays analog flash clock on your website. It's easy to use and...

WHMCS 4.x - invoicefunctions.php?id SQL Injection

WHMCS 4.x - invoicefunctions.php?id SQL Injection Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:"Powered by WHMCompleteSolution" OR inurl:"submitticket.php‎"‎ Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5....

eggBlog 4.1.2 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Expl0itation 1 - Google Dork:"powered by eggBlog.net" 2 - http://server/path/lib/openwysiwyg/addons/imagelibrary/insertimage.php?wysiwyg= 3 - http://server/path/photos/uploads/shell.php.jpg 0day.today 2018-03-19...

EggBlog 4.1.2 - Arbitrary File Upload

Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Tested on: Win8 Pro x64 Expl0itation 1 -...

SWFUpload CSRF / XSS / Object Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

LetterIt2 <= XSS Vulnerability

Exploit for php platform in category web applications LetterIt2 alert1; Demo: 01 :http://iz.sp.gov.br/stats/help/install.php?langhelpSprache=%22%3E%3Cscript%3Ealert%281337%29;%3C/script%3E 02...

EasyPHP WebServer v.(all) <= Multiple Vulnerabilities

EasyPHP is Suffer from : + Auth Bypass + Remote Shell Injection / Remote Code Execute The Bug in EasyPHP WebServer Manager found because the PORTAL of Administration doesn't protected ! so just when you found the Admin-Portal - you can bypass the auth directly and remote attacker can get some...

Pollen CMS 0.6 File Disclosure

Title: Pollen CMS = 0.6 - Local File Disclosure Google Dork: intext:"Powered by Pollen CMS" Date: 25 Mars 2013 Exploit Author: MizoZ Vendor Homepage: pollencms.com BROKEN Software Link: https://code.google.com/p/pollencms/ Version: 0.6 Tested on: Ubuntu Desktop 12.04 -- File...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

Rebus:list - 'list.php?list_id' SQL Injection

Exploit Title: Rebus:list SQL Injection Vulnerability Date: 3/18/2013 Vendor Homepage: http://www.ptfs-europe.com/products/rebus/rebuslist/ Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: listid= Google Dork: intext: Powered by rebus:list...

EasyProWebTools.com <= Local File Inclusion Vulnerability

Exploit for php platform in category web applications EasyProWebTools.com = Local File Inclusion Vulnerability Date : 19/03/2013 Author : GoLdM Category : Local File Inclusion Google Dork : Powered By: EasyProWebTools.com EX 1: http://bigwo.com/index.php?page=Local File EX 2:...

WordPress Plugin Count Per Day 3.2.5 - 'counter.php' Cross-Site Scripting

!/usr/bin/ruby Exploit Title: WordPress Count per Day 3.2.5 CSRF Google Dork: inurl:"/wp-content/plugins/count-per-day Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/count-per-day/ Software Link:...

WordPress Simply Poll Plugin 1.4.1 - CSRF / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Simply Poll Plugin 1.4.1 CSRF and stored XSS Google Dork: inurl:"/wp-content/plugins/simply-poll Date: 16.03.2013 Exploit Author: m3tamantra Vendor Homepage: http://wordpress.org/extend/plugins/simply-poll/ Software...

Rebus:list SQL Injection

Exploit Title: Rebus:list SQL Injection Vulnerability Date: 3/18/2013 Vendor Homepage: http://www.ptfs-europe.com/products/rebus/rebuslist/ Author: Robert Cooper robert.cooper at areyousecure.net Tested on: Linux/Windows 7 Vulnerable Parameters: listid= Google Dork: intext: Powered by rebus:list...

Cisco Video Surveillance Operations Manager 6.3.2 XSS / LFI / Bypass

Exploit Title:Cisco Video Surveillance Operations Manager Multiple vulnerabilities Google Dork: intitle:"Video Surveillance Operations Manager Login" Date: 22 Feb 2013 reported to the vendor Exploit Author: Bassem | bassem.co Vendor Homepage: www.cisco.com Version: Version 6.3.2 Tested on: Versio...

PHPBoost 4.0 <= (FileUpload/Disclosure) Multiple Vulnerabilities

PHPBoost 4.0 Multiple Vulnerabilities - Remote File Upload - Full Informations Disclosure 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type...

Help Desk Customer Service Ticket System 1.0 CSRF

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

Zenphoto 1.4.4.1 Blind SQL Injection

Exploit Title : Zenphoto ver 1.4.4.1 Blind SQL Injection Author : HosseinNsn Home : http://Emperor-Team.Org Software Link : http://www.zenphoto.org Security Risk : High Version : 1.4.4.1 Tested on : Linux - Windows Google Dork : "Powered by Zenphoto" Exploit :...