Max Guestbook 1.0 - Multiple Vulnerabilities

Max Guestbook 1.0 - Multiple Vulnerabilities Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

ModX 2.2.0 - Multiple Vulnerabilities

Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure Google Dork: if relevant we will automatically add these to the GHDB Date: 13/03/2012 Author: n0tch aka andmuchmore Software Link: http://modx.com/download/ Version: 2.2.0 Tested on: Windows XP/ Windows 7 / Ubuntu +-- LFI --+...

asaanCart - Cross-Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...

Max Guestbook 1.0 - Multiple Vulnerabilities

Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

AsaanCart Cross Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...

Simple Posting System - Multiple Vulnerabilities

Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Simple Posting System - Multiple Vulnerabilities

Simple Posting System - Multiple Vulnerabilities Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +...

asaanCart XSS/LFI Vulnerabilities

Exploit for php platform in category web applications Exploit Title :asaanCart Multiple Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...

Max's Photo Gallery 1.0 Local File Inclusion

Exploit Title: Maxs Photo Gallery Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Max's Guestbook 1.0 Local File Inclusion / Path Disclosure

Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Saman Portal - Local File Inclusion

=========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers: http://sis-eg.com/services/customers/ + Google dork:...

Saman Portal - Local File Inclusion

Saman Portal - Local File Inclusion =========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers:...

AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net

Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...

Saman Portal Local File Inclusion

=========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers: http://sis-eg.com/services/customers/ + Google dork:...

AneCMS v.2e2c583 LFI exploit

Exploit for php platform in category web applications Exploit Title: AneCMS v.2e2c583 LFI exploit Date: 03.04.2012 Author: I2sec-PJH Software Link: https://github.com/AneGroup/AneCMS Version: v.2e2c583 ----------------------------------------------------- -Description vulnerabilities have been...

AneCMS 2e2c583 - Local File Inclusion

AneCMS 2e2c583 - Local File Inclusion Exploit Title: AneCMS v.2e2c583 LFI exploit Date: 03.04.2012 Author: I2sec-PJH Software Link: https://github.com/AneGroup/AneCMS Version: v.2e2c583 ----------------------------------------------------- -Description vulnerabilities have been discovered in the...

Bitweaver v2.81 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp...

Bitweaver 2.81 Local File Inclusion

Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp ------------------------------------------------------ -Description LFI...

CMS von artmedic webdesign LFI

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : CMS von artmedic webdesign LFI Date : 26-02-2012 Author : TeaM MosTa Version : All Download :...

cPassMan 1.82 - Remote Command Execution

cPassMan 1.82 - Remote Command Execution Product. Collaborative Passwords Manager cPassMan Platform. Independent PHP Affected versions. 1.82 e.g. php -f $argv0 192.168.129.130 /cpassman\n"; exit; print "--------------------------------------------------------------------------------\n"; print...