LY Website CMS SQL Injection

Title: LY Website CMS Sql Injection vulnerability + Date: 2014-08-15 + Author: Iran Security Group + Vendor Homepage: http://www.lywebsite.com/ + Tested on: Windows7 & Kali Linux + Vulnerable Files: /pro.php + Dork : inurl:/pro.php?CateId= intext:"Power By LY Website" POC:...

WordPress CK-And-SyntaxHighLighter Arbitrary File Upload

Title: Wordpress ck-and-syntaxhighlighter Plugin RFU vulnerability + Date: 2014-08-12 + Author: Hekt0r + Tested on: Windows7 & Kali Linux + Vendor Homepage: http://wordpress.org/ + Software Link: http://wordpress.org/plugins/ck-and-syntaxhighlighter/ + Dork :...

J&W Communications SQL Injection

Title: J&W Communications Cms SQL Injection Vulnerability + Date: 2014-07-29 + Author: Hekt0r + Vendor Homepage: www.jw-com.com + Tested on: Windows7 & Kali Linux + Vulnerable Files: /rosters.php /team.php /scoresheet.php + Dork : intext:"designed by J&W Communications" inurl:/team.php.php?id=...

Design Foundry Cross Site Scripting / SQL Injection

Title: Foundry CMS Multiple Vulnerability + Date: 2014/07/20 + Author: Hekt0r + Vendor Homepage: www.design-foundry.co.uk + Tested on: Windows 7 & Kali Linux + Vulnerable Files: /page.php + Dork : intext:"Site by The Design Foundry" POC: + Sql Injection: http://site/page.php?id=SQL-Injection +...

NeginGroup Cross Site Scripting / SQL Injection

Title: Sql Injection / Xss on NeginGroup CMS + Date: 2014/5/29 + Author: Hekt0r + Vendor Homepage: www.NeginGroup.com + Tested on: Windows 7 & Kali Linux + Vulnerable File: /viewpageone.php + Dork : intext:www.NeginGroup.com inurl:/viewpageone.php?v= Exploitation: + Exploit Sql Injection:...

InvisionPower CMS Links To Titles 3.0 Cross Site Scripting

InvisionPower cms Links to Titles utility Presistent XSS =========================================== Author: UmPire Version: 3.0 Full details for version 3.1 patch is not mentioned. It's suspicious to affect all versions. Vendor URL: http://invisionpower.com Product URL:...