SAIA (Software Gestion Documental) SQL Injection & XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: SAIA Software Gestion Documental SQL Injection & XSS Vulnerability D0rk: intext:"Todos los derechos reservados CERO K" Exploit Author: n4pst3r Vendor Homepage: https://www.cerok.co/ Tested on: Windows 10, Debian 9 ...

J&W Communications SQL Injection

Title: J&W Communications Cms SQL Injection Vulnerability + Date: 2014-07-29 + Author: Hekt0r + Vendor Homepage: www.jw-com.com + Tested on: Windows7 & Kali Linux + Vulnerable Files: /rosters.php /team.php /scoresheet.php + Dork : intext:"designed by J&W Communications" inurl:/team.php.php?id=...

Actualizer CMS - Multiple Vulnerabilities

Cross Site Scripting, Blind SQL Injection and Full Path Disclosure that i found on Actualizer CMS. Title: Actualizer CMS - Multiple Vulnerabilities Date: 22.09.2013 Tested on: Linux 3.0 - 3.9 95% Vendor: actualizer.pl Demo: demo.actualizer.pl Dork: intext:"Powered by Actualizer & Heuristic"...

CyberBizia Cross Site Scripting / SQL Injection

Exploit Title : CyberBizia Multiple Vulnerabilites Software link : http://www.cyberbizia.com Exploit Author : Ashiyane Digital Security Team Tested on: Windows 7 , Linux Google Dork : intext:"Powered by CyberBizia" Date: 2013/08/30...

Site by Webrevelation SQL Injection Vulnerability

=========================================================== Site by Webrevelation SQL Injection Vulnerability =========================================================== :-----------------------------------------------------------------------------------------------------------------------: :...

YSD Cross Site Scripting

======================================================================================== YSD alert/HC/ + Greetz : | Am!r | B3HZ4D | PacketStormSecurity.org | Exploit-db.com | All Iranian PentesterZ + You Can See Us In The D4rk...

WEBSKINZ CMS SQL Injection

Exploit Title : WEBSKINZ Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.www.webskinz.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"DESIGNED &...

Infinite IT Solutions CMS Cross Site Scripting

? Exploit Title : Infinite IT Solutions Cms Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.infiniteitsolutions.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Do...

ANGLER Technologies CMS Cross Site Scripting

? Exploit Title : ANGLER Technologies Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : www.angleritech.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Design -...

SYSTMSTERCHI - SQL Injection Vulnerability

Exploit for php platform in category web applications -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

CMS Wizard SQL Injection

Title : CMS Wizard SQL Injection Vulnerbility Date : 7th June 2012 Author : Mr.Gh0st [email protected] Vendor : http://www.cmswizard.co.uk/ Dork : intext:Powered by CMS Wizard inurl:shop.php?viewcategory= Tested On :Arch Linux P0c : /shop.php?viewcategory=104' Demo Site :...

Supernews 2.6.1 - 'noticias.php?cat' SQL Injection

Supernews Date: 31/05/2012 Version: 2.6.1 Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews ISRAEL Author will be not responsible for any damage. Vulnerable Code - noticias.php 30-31: 30. $idcategoria = formatDados$GET'cat'; 31. $query = mysqlquery"SELECT id, categoria FROM...

phpBB 2 Remote File Inclusion

================================================ Fully Modded phpBB 2 Remote File Include Exploit ================================================ +Title : Fully Modded phpBB 2 Remote File Include Exploit +Author : josalijoe +Contact : [email protected] +Download :...

CMS Firebrand Tec - Local File Inclusion

CMS Firebrand Tec - Local File Inclusion ====================================================================== L.F.I Firebrand Technologies L.F.I ====================================================================== Exploit Title : CMS Firebrand Tec Local File Inclusion Vulnerability Date :...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

Community CMS 0.5 Multiple SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta + Application: Community CMS + Version: 0.5 + Website: http://sourceforge.net/projects/communitycms/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Dork: intext:"Powered by Community CMS" + Date: 30 Mar 2009 +...

Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog Salvatore "drosophila" Fresta - Max.Blog /bo...

mxsystem-sql.txt

Name : MX-System 2.7.3 index.php page Remote SQL Injection Vulnerability Author : cOndemned Dork : intext:Powered by MX-System 2.7.3 Greetz : ZaBeaTy, str0ke, doctor, Avantura /3 PoC : http://target/path/index.php?page=-1+union+select+1,2,3,4,5,concatwschar58,version,user,now/...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...