myBB KingChat Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELE...

MyBB KingChat SQL Injection

Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE...

Wordpress Themes - Shotzz Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------------- Wordpress Themes- Shotzz Arbitrary File Upload Vulnerability -------------------------------------------------------------------------------- Author = Zikou-16...

Free Hosting Manager 2.0 - 'id' SQL Injection

Free Hosting Manager V2.0 SQL Injection Vulnerability Google Dork: inurl:clients/packages.php?id=1 Bug discovered by Yakir Wizman AKA Pr0T3cT10n, Date: 29/11/2012 Version: 2.0 Software Link: http://www.fhm-script.com/download.php ISRAEL Author will be not responsible for any damage. SQL Injection...

Free Hosting Manager 2.0 - id SQL Injection

Free Hosting Manager 2.0 - id SQL Injection Free Hosting Manager V2.0 SQL Injection Vulnerability Google Dork: inurl:clients/packages.php?id=1 Bug discovered by Yakir Wizman AKA Pr0T3cT10n, Date: 29/11/2012 Version: 2.0 Software Link: http://www.fhm-script.com/download.php ISRAEL Author will be n...

Free Hosting Manager V2.0 SQL Injection Vulnerability

Free Hosting Manager is a php Script host sites Exploit Title: Free Hosting Manager V2.0 SQL Injection Vulnerability Author: Spiral E-mail: email protected Google Dork: inurl:clients/packages.php?id=1 Tested on: Windows 7 Vendor: http://www.fhm-script.com/download.php Exploit:...

WordPress Myflash Local File Inclusion

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Myflash Plugin | Local File Inclusion Vulnerability | Google Dork: inurl:"/myflash/myextractXML.php?path=" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Locatio...

ES CmS 0.1 Sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version:...

ES CmS 0.1 - SQL Injection

ES CmS 0.1 - SQL Injection Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc...

ES CmS 0.1 - SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

ES CMS 0.1 SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

WordPress Zarzadzanie Kontem Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress zarzadzaniekontem Plugin | Arbitrary File Upload Vulnerability | Google Dork: inurl:"/wp-content/plugins/zarzadzaniekontem/" Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on:...

WordPress Zingiri Web Shop 2.5.0 Shell Upload

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress Zingiri-web-shop 2.5.0 Plugin | Arbitrary File Upload Vulnerability | Version: 2.5.0 Software Link: www.zingiri.com/plugins-and-addons/web-shop/ Google Dork: inurl:"/wp-content/plugins/zingiri-web-shop/" Exploit...

WordPress Madebymilk SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress madebymilk Theme SQL Injection | Google Dork: inurl:/madebymilk/voting-popup.php | Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

WordPress List Communities SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title: Wordpress listcommunities SQL Injection | Google Dork: inurl:/listcommunities/communityprofile.php| Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...

Joomla Component com_autostand shell upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comautostand file upload Author: Over-X email: email protected Vendor or Software Link: forum.joomla.org Version: v3 Google dork: "inurl:comautostand" Tested on: win Xp...

Prodware (page.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Prodware page.php SQL Injection Vulnerability Date: 11-11-2012 Author: Mouh Marvel-Dz Facebook : http://www.facebook.com/mouh.marvel Category: webapps Google dork: intext:"Designed by Prodware" inurl:page.php?subcat= Tested on:...

WordPress Calendar-Script Blind SQL Injection

Exploit Title: Wordpress Calendar-Script Plugin Blind SQL Injection Vulnerability Google Dork: inurl:"/Calendar-Script/load.php?cid=1" or "intext:Copyright phpcalendarscripts.com ©" Exploit Author: Ashiyane Digital Security Team Vendor Homepage: http://phpcalendarscripts.com/ Tested on: Windows 7...

Joomla Component com_garyscookbook file upload Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla comgaryscookbook file upload Author: Over-X email: email protected Vendor or Software Link: www.joomla.it Version: 242 Google dork: "inurl:comgaryscookbook" Tested on: win Xp...