SePortal 2.5 - SQL Injection (1)

Exploit Title: SePortal 2.5 SQL Injection Google Dork: Powered by SePortal 2.5 Date: Decembar/08/2011 Author: Don BalcanCrew & BalcanHack Software Link: http://seportal.org Version: 2.5 Tested on: LiteSpeed Vulnerability: http://server/redirect.php?action=banner&goto= SQL How to fix this...

Con-IMedia SQL Injection Vulnerability

Exploit for php platform in category web applications . . | / / || | / |/ \ / \ / \ / \ \ | \ / // | / // | | Y \ \ |/|| /\ / /|| || / / /// /==A|B|H== ================================================================ Exploit Title : Con-IMedia SQL inj: vulnerable Google Dork : "Powered By:...

icomex cms (Content Management Solutions) sql injection vulnerability

Exploit Title: icomex cms sql injection vulnerability Author : XaDaL Link : http://www.icomex.com/ Tested on : windows google dork : This site is powered by Content Management Systems from icomex === POC === =x= http://site/html/Home.htm?articleid=SQL =x= http://site/html/services.htm?articleid=S...

Log1 CMS 2.0 - ajax_create_folder.php Remote Code Execution

Log1 CMS 2.0 - ajaxcreatefolder.php Remote Code Execution ?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor :...

TACMS TeachArabia SQL Injection / Local File Inclusion

Exploit Title: TACMS - TeachArabia Multiple Vulnerabilities Author : CoBRa21 Thanks : e-banka.org & cyber-warrior.org E-Mail : uykucu at windowslive.com Google Dork : Powered by TeachArabia Script Page : http://www.teacharabia.com/ SQL Exploit...

Digital Attic SQL Injection

Title : Digital Attic SQL Injection Vulnerability Vendor Link: : http://www.digitalattic.com/ Author : tempemendoan Contact : anu :D Google Dork : inurl:"gorengan tempe" intext:"CMS by Digital Attic" === POC === ? http://website/index.php?id=SQL Note : SQL Versi =4.1 Login : http://website/cp/...

Webistry CMS 1.0 SQL Injection

Exploit Title : Webistry v1.0 CMS SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com Google Dork : Powered by CMS : Webistry v1.0 Script Page : null Exploit http://127.0.0.1/ PATH /index.php?pid=14' SQL http://127.0.0.1/ PATH /index.php?pid=14 union select...

Tamweb CMS SQL Injection Vulnerability

Exploit for asp platform in category web applications Name: Tamweb CMS SQL Injection Vulnerability Type: ASP Category: Webapps Web Site: http://www.tamweb.ir/ Google Dork: inurl:.asp intext:"email protected" Date: 4-Nov-2011 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 II...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16...

PHP Photo Album 0.4.1.16 Cross Site Scripting / Disclosure

---------------------------------------------------------------- PHP Photo Album Poc 2 http://localhost/phpAlbum/main.php?cmd=albumnew&keyword=XSS Demo :http://www.iloveazucar.com/phpAlbum/main.php?cmd=albumnew&keyword="onmouseover%3dprompt975554 bad%3d" Demo :http://www.dolfpretorius.com/main.ph...

PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple...

MG For Media Solutions SQL Injection

=============================================================== Exploit Title : MG for media solutions SQL inj: vulnerable Google Dork : intext:"Powered by MG for media solutions Date : 27-10-2011 Author : nGa Sa Lu GaNgst3r Service Provider : http://www.mg-me.com/ourservices Tested on : Vista...

Joomla Br SQL Injection

Exploit Title: Joomla Component combr SQL Injection Vulnerability Author : CoBRa21 E-Mail : ghost1loverathotmail.com Google Dork : inurl:index.php?option=combr Demo: http://beginrecovery.com/beta/index.php?option=combr&controller=resource&view=resource&task=resourceinfo&Itemid=8&stateid=33 Exploi...

Marinet CMS Blind SQL Injection

==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Center Software Link:...

Marinet CMS - 'room.php' Blind SQL Injection

==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Security Center Software Link:...

Design Associates SQL Injection

================================================ Exploit Title : designassociates SQL Injection Vulnerability Google Dork : intext:"website by designassociates" Date : 2011-30-09 Author : nGa Sa Lu GaNgst3r Service Link : http://www.designassociates.ie/ Tested on : Vista Platform : php + Google...

Marinet CMS - room.php Blind SQL Injection

Marinet CMS - room.php Blind SQL Injection ==================================================== MARINET CMS room.php = Blind SQL Vulnerability ==================================================== Exploit Title: MARINET CMS room.php = Blind SQL Vulnerability Date: 30 - 09 - 2011 Author: BHG Securi...

SabadKharid Shell Upload

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author : St493r Contact : [email protected] Title : SabadKharid Remote Arbitrary File Upload Exploit Vendor : http://sabadkharid.com Software : http://dl.p30vel.ir/scripts/sabadkharid-professional-nulled-p30vel.zip Tested ...

Tajan System Arbitrary File Download

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Author : St493r Contact : [email protected] Title : Tajan System Arbitrary File Download Vulnerability Tested On : Linux Date : 28 - 09 - 2011 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

Typo3 File Disclosure

Exploit for php platform in category web applications Exploit Title: Typo3 File Disclosure Google Dork: inurl:"/fileadmin/download.php?Fichieratelecharger=" Dork : inurl:fileadmin/php/commun/download.php Dork : inurl:fileadmin/scripts/download.php Date: 29/09/2011 Author: Number 7 Contact...