WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload

WordPress Plugin Font Uploader 1.2.4 - Arbitrary File Upload Description : Wordpress Plugins - WordPress Font Uploader Shell Upload Vulnerability Version : 1.2.4 Link : http://wordpress.org/extend/plugins/font-uploader/ Plugins : http://downloads.wordpress.org/plugin/font-uploader.1.2.4.zip Date ...

Wordpress MM Forms Community Plugin 2.2.6 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins :...

SN News 1.2 - 'visualiza.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/snnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "visualiza.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload

WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins :...

WordPress Plugin Gallery 3.06 - Arbitrary File Upload

WordPress Plugin Gallery 3.06 - Arbitrary File Upload Description : Wordpress Plugins - Gallery Arbitrary File Upload Vulnerability Version : 3.06 Link : http://wordpress.org/extend/plugins/gallery-plugin/ Plugins : http://downloads.wordpress.org/plugin/gallery-plugin.3.06.zip Date : 01-06-2012...

Wordpress Gallery Plugin 3.06 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Gallery Arbitrary File Upload Vulnerability Version : 3.06 Link : http://wordpress.org/extend/plugins/gallery-plugin/ Plugins : http://downloads.wordpress.org/plugin/gallery-plugin.3.06.zip Date : 01-06-2012...

WordPress Plugin MM Forms Community 2.2.6 - Arbitrary File Upload

Description : Wordpress Plugins - MM Forms Community Arbitrary File Upload Vulnerability Version : 2.2.5 - 2.2.6 Link : http://wordpress.org/extend/plugins/mm-forms-community/ Plugins : http://downloads.wordpress.org/plugin/mm-forms-community.zip Date : 24-05-2012 Google Dork :...

WordPress Foxypress Shell Upload

Description : Wordpress Plugins - Foxypress Shell Upload Vulnerability Version : 0.4.1.1 - 0.4.2.1 Link : http://wordpress.org/extend/plugins/foxypress/ Plugins : http://downloads.wordpress.org/plugin/foxypress.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/foxypress/ Author : Samm...

Wordpress WP Marketplace Plugin 1.5.0 - 1.6.1 Arbitrary File Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - WP Marketplace Shell Upload Vulnerability Version : 1.5.0 - 1.6.1 Link : http://wordpress.org/extend/plugins/wpmarketplace/ Plugins : http://downloads.wordpress.org/plugin/wpmarketplace.zip Date : 26-05-2012...

Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload

Exploit for php platform in category web applications Description : Wordpress Plugins - Nmedia WordPress Member Conversation Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wordpress-member-private-conversation/ Plugins :...

Inertia Technologies - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Team Inertia Technologies - SQL Injection Vulnerability ========================================================================== Title: Team Inertia Technologies - SQ...

IM Storm SQL Injection

! Title : IM Storm SQL Injection Vulnerability ! Author : AtlasTeam ! Author Home : AtlasTeam.ir ! Contact : AtlasTeam.ir @ Gmail dot Com ! Risk Level : High ! Date : Monday, June 4, 2012 ! Vendor : imstorm.com ! Tested On : OpenBSD, Backtrack 5, Windows XP ! Vulnerability Details...

Xtemplate Shell Upload

Exploit Title: Xtemplate shell upload Date: 4/6/12 Author: Th3-Skywalk3r Email : [email protected] Category:: webapps Google dork: /xtemplates/eng/ Tested on: Windows 7 & BT5r2 Demo site: http://www.deadseashop.co.il/inc/xtemplates/eng/fileedit.php...

CMS Faethon 1.3.4 SQL Injection

! Title : CMS Faethon 1.3.4 SQL Injection Vulnerability ! Author : AtlasTeam ! Author Home : AtlasTeam.ir ! Contact : AtlasTeam.ir @ Gmail dot Com ! Risk Level : High ! Date : Monday, June 4, 2012 ! Vendor : cmsfaethon.com ! Tested On : OpenBSD, Backtrack 5, Windows XP ! Vulnerability Details...

F2blog Shell Upload

Name: f2blog Remote File Uploader RFU Sh3ll Google Dork: inurl:/plugins/expose4/uploadimg.php Type: PhP Author: MR.XpR Tested On: Linux Backtrack 1.Upload shell ----- Sh3ll.php.jpg 2.load shell ------- http://patch/components/comexpose/expose/img/shell.php.jpg Expamle :...

f2blog Remote File Uploader (RFU) Vulnerability

Exploit for php platform in category web applications Name: f2blog Remote File Uploader RFU Sh3ll Google Dork: inurl:/plugins/expose4/uploadimg.php Type: PhP Author: MR.XpR Tested On: Linux Backtrack 1.Upload shell ----- Sh3ll.php.jpg 2.load shell -------...

Membris 2.0.1 - Multiple Vulnerabilities

Membris 2.0.1 - Multiple Vulnerabilities Exploit:Membris v 2.0.1 Sql \ XSS & File Disclosure Vulnerabilities Google Dork: Powered by Membris v 2.0.1 Date: Dr.abolalh Author:01/06/2012 E-Mail: [email protected] Software Link: http://scripts.toocharger.com/fiches/scripts/membris/5258.htm Version:...

Membris 2.0.1 - Multiple Vulnerabilities

Exploit:Membris v 2.0.1 Sql \ XSS & File Disclosure Vulnerabilities Google Dork: Powered by Membris v 2.0.1 Date: Dr.abolalh Author:01/06/2012 E-Mail: [email protected] Software Link: http://scripts.toocharger.com/fiches/scripts/membris/5258.htm Version: Membris v 2.0.1 Exploit-DB Note: Application...

NewsAdd 1.0 - 'lerNoticia.php?id' SQL Injection

NewsAdd Date: 31/05/2012 Version: 1.0 Software Link: http://phpbrasil.com/script/3tCyUs1JeL1M/newsadd--mysql ISRAEL Author will be not responsible for any damage. YOU SHOULD BE LOGGED IN | YOU SHOULD BE LOGGED IN Vulnerable Code - lerNoticia 15-22: 21.if $GET 22. 23. $id = $GET'id'; 24. 25. $quer...

Supernews 2.6.1 - 'noticias.php?cat' SQL Injection

Supernews Date: 31/05/2012 Version: 2.6.1 Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews ISRAEL Author will be not responsible for any damage. Vulnerable Code - noticias.php 30-31: 30. $idcategoria = formatDados$GET'cat'; 31. $query = mysqlquery"SELECT id, categoria FROM...