PHP Matrimonial Script 3.0 - SQL Injection

Exploit Title: Matrimonial Script v3.0 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/matrimonial-script/ Demo: http://74.124.215.220/matriialscrip/ Version: 3.0 Tested on: Win7 x64, Kali Linux x64...

Joomla Content ConstructionKit 1.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Content ConstructionKit v1.1 - SQL Injection Google Dork: inurl:index.php?option=comoscck Date: 04.03.2017 Vendor Homepage: http://ordasoft.com/ Software Buy:...

Joomla! Component Monthly Archive 3.6.4 - author_form SQL Injection

Joomla! Component Monthly Archive 3.6.4 - authorform SQL Injection Exploit Title: Joomla! Component Monthly Archive v3.6.4 - SQL Injection Google Dork: inurl:index.php?option=commonthlyarchive Date: 04.03.2017 Vendor Homepage: http://web357.eu/ Software Buy:...

Joomla! Component Monthly Archive 3.6.4 - 'author_form' SQL Injection

Exploit Title: Joomla! Component Monthly Archive v3.6.4 - SQL Injection Google Dork: inurl:index.php?option=commonthlyarchive Date: 04.03.2017 Vendor Homepage: http://web357.eu/ Software Buy: https://extensions.joomla.org/extensions/extension/news-display/articles-display/monthly-archive/ Demo:...

Joomla Guesser 1.0.4 SQL Injection

Exploit Title: Joomla! Component Guesser v1.0.4 - SQL Injection Google Dork: inurl:index.php?option=comguesser Date: 02.03.2017 Vendor Homepage: http://www.bitsgeo.com/ Software: https://extensions.joomla.org/extensions/extension/marketing/guesser/ Demo: http://www.bitsgeo.com/guesson/ Version:...

Joomla! Component Guesser 1.0.4 - type SQL Injection

Joomla! Component Guesser 1.0.4 - type SQL Injection Exploit Title: Joomla! Component Guesser v1.0.4 - SQL Injection Google Dork: inurl:index.php?option=comguesser Date: 02.03.2017 Vendor Homepage: http://www.bitsgeo.com/ Software:...

Rage Faces Script 1.3 - SQL Injection

Rage Faces Script 1.3 - SQL Injection Exploit Title: Rage Faces Script v1.3 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/ragefaces.php Demo: http://ragefaces.memesoftware.com/ Version: 1.3 Tested on: Win7 x64...

Rage Faces Script 1.3 - SQL Injection

Exploit Title: Rage Faces Script v1.3 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/ragefaces.php Demo: http://ragefaces.memesoftware.com/ Version: 1.3 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan...

Meme Maker Script 2.1 - 'user' SQL Injection

Exploit Title: Meme Maker Script 2.1 - SQL Injection Google Dork: N/A Date: 01.03.2017 Vendor Homepage: http://www.memesoftware.com/ Software: http://www.memesoftware.com/mememaker.php Demo: http://www.memefaces.me/ Version: 2.1 Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Joomla Community Surveys 4.3 SQL Injection

Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/surveys/community-surveys...

Joomla Community Quiz 4.3.5 SQL Injection

Exploit Title: Joomla! Component Community Quiz v4.3.5 - SQL Injection Google Dork: inurl:index.php?option=comcommunityquiz Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/community-quiz/ Demo:...

Joomla Community Polls 4.5.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Community Polls v4.5.0 - SQL Injection Google Dork: inurl:index.php?option=comcommunitypolls Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

HotelCMS with Booking Engine - SQL injection vulnerability

http://localhost/PATH/locale? locale=SQL the locale parameter there is sql injection Wherein the error injection as follows: payload: http://localhost/PATH/locale? locale=1' AND SELECT 3507 FROMSELECT COUNT,CONCATFLOORRAND02,md5233x FROM INFORMATIONSCHEMA. The PLUGINS GROUP BY xa-- Lilt Test...

Joomla Community Surveys 4.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Community Surveys v4.3 - SQL Injection Google Dork: inurl:index.php?option=comcommunitysurveys Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla! Component Community Quiz 4.3.5 - SQL Injection

Exploit Title: Joomla! Component Community Quiz v4.3.5 - SQL Injection Google Dork: inurl:index.php?option=comcommunityquiz Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/living/education-a-culture/community-quiz/ Demo:...

Joomla! Component Community Polls 4.5.0 - SQL Injection

Exploit Title: Joomla! Component Community Polls v4.5.0 - SQL Injection Google Dork: inurl:index.php?option=comcommunitypolls Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/polls/community-polls/ Demo...

Joomla! Component WMT Content Timeline 1.0 - id SQL Injection

Joomla! Component WMT Content Timeline 1.0 - id SQL Injection Exploit Title: Joomla! Component WMT Content Timeline v1.0 - SQL Injection Google Dork: inurl:index.php?option=comwmtcontenttimeline Date: 17.02.2017 Vendor Homepage: http://devecostudio.com Software Buy:...

HelpDeskZ < 1.0.2 - (Authenticated) SQL Injection / Unauthorized File Download

''' Exploit Title: HelpDeskZ fetchRow"SELECT , COUNTid AS total FROM ".TABLEPREFIX."attachments WHERE id=".$db-realescapestring$params2." AND ticketid=".$params0." AND msgid=".$params3; third argument AND msgid=".$params3; sent to fetchRow query with out any senitization Steps to reproduce:...

B2B Alibaba Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: B2B Alibaba Clone Script - SQL Injection Google Dork: N/A Date: 20.01.2017 Vendor Homepage: https://www.clonescriptsoft.com/ Software Buy: https://www.clonescriptsoft.com/collections/b2b-alibaba-clone/products/alibaba-clone Demo...

My Php Dating 2.0 - path Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability: My Php Dating 2.0 - SQL Injection Web Vulnerability Google Dork: My Php Dating Date:09.01.2017 Vendor Homepage: http://www.phponlinedatingsoftware.com/demo.htm Tested on: http://www.phponlinedatingsoftware.com/demo/ Script Name:...