WebPagetest 2.7 Local File Disclosure

Author: TUNISIAN CYBER + Exploit Title: WebPagetest 2.7 LFD Vulnerability + Date: 24-12-2013 + Category: WebApp + Vendor: http://code.google.com/p/webpagetest/downloads/detail?name=webpagetest2.7.zip&can=2&q= + Google Dork: n/a + Tested on: KaliLinux/Debian 3.7.2 + Friend's blog:...

iScripts Multicart SQL Injection

Iscripts multicart Multiple vulnerabilities Author : i-Hmx [email protected] sec4ever.com - Vendor have been contacted since 2 years for more than 20 times and he don't give ashit @ all :/ I.Sql Injection Vulns /getProductOptionDetailsAjax.php For Table name Post productoptionid=i-Hmx'/!1337union...

Iscripts-AutoHoster Multiple Vulnerabilities

Multi vulnerabilities for iscripts autohoster The script cost $199.95 http://www.iscripts.com/productlistingdetail.php?productid=18 used by some big companies Many vulnerabilities founded such as File upload + SQL + LFD ... This is private exploit. You can buy it at https://0day.today...

VebTek CMS LFD Vulnerability

Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...

ColdFusion Zero day vulnerability : Remote File Disclosure of Password Hashes

ColdFusion Zero day vulnerability : Remote File Disclosure of Password Hashes Yesterday Blackhatacademy Released Fully automated MySQL5 boolean based enumeration tool. Today Another post expose the most critical ColdFusion vulnerability affects about a tenth of all ColdFusion servers at the...

CMS Loko Media Local File Download Vulnerability

Exploit for php platform in category web applications !===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t email protected Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net...

Quick Polls Local File Inclusion and Deletion Vulnerabilities

Exploit for php platform in category web applications 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loc...

Infinity <= 2.x.x options[style_dir] Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit:...