Qe 4.1.6 Cross Site Scripting

Exploit Title: Qe 4.1.6 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://c97.net Version : 4.1.6 Tested on: Windows Category: webapps Google Dork: Open your eyeZ + Exploit : http:///qe4.1.6/install/install.php URL encoded GET input cmd was set to : "alert/xss/ The...

Ocportal 9.0.11 Cross Site Scripting / Local File Inclusion

Exploit Title: Ocportal 9.0.11 Cross site scripting Ocportal 9.0.11 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://ocportal.com Version : 9.0.11 Tested on: Windows Category: webapps Google Dork: intext:"Powered by ocportal" + Exploit XSS :...

Chat2 Cross Site Scripting / SQL Injection

Exploit Title: Chat2 Blind SQL Injection Chat2 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Tested on: Windows Category: webapps Google Dork: inurl:"/chatrooms.php" + Exploit SQL: http:///Chat2/jumpin.php URL encoded POST input userid was set to :...