BookingWizz Booking System 5.5 - Multiple Vulnerabilities

BookingWizz Booking System 5.5 - Multiple Vulnerabilities 1. ADVISORY INFORMATION ======================================== Title: BookingWizz Default username/password: admin/pass"; PR2 - Cross Site Scripting ======================================== File : eventList.php // Improper user input...

BookingWizz Booking System < 5.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications 1. ADVISORY INFORMATION ======================================== Title: BookingWizz Default username/password: admin/pass"; PR2 - Cross Site Scripting ======================================== File : eventList.php // Improper user input...

BookingWizz Booking System < 5.5 - Multiple Vulnerabilities

ADVISORY INFORMATION ======================================== Title: BookingWizz Default username/password: admin/pass"; PR2 - Cross Site Scripting ======================================== File : eventList.php // Improper user input validation on Line 24: $serviceID =...

PLANET IP LFI / CSRF / XSS / Authentication Bypass

| | | | | | | | | | | | / | '\ \ /\ / / \ | | |/ | ' / | | | | \ V V / / | | | | | | \ \ /|| // ||||,|./|/ Security Adivisory 2016-04-06 www.orwelllabs.com Twitter:@orwelllabs mantra: ...not affect a product that is in scope for... AhHum! Overview ======== Technical Risk: high Likelihood of...

Web2py 2.14.5 CSRF / XSS / Local File Inclusion

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

Web2py 2.14.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati -...

Web2py 2.14.5 - Multiple Vulnerabilities

Title - Web2py 2.14.5 Multiple Vulnerabilities LFI,XSS,CSRF Exploit Title : Web2py 2.14.5 Multiple Vulnerabilities LFI, XSS,CSRF Reported Date : 2-April-2016 Fixed Date : 4-April-2016 Exploit Author : Narendra Bhati - https://www.exploit-db.com/author/?a=7638 CVE ID : LFI - CVE-2016-4806 ,...

Ajaxel CMS 8.0 - Multiple Vulnerabilities

Ajaxel CMS 8.0 - Multiple Vulnerabilities Ajaxel CMS 8.0 Multiple Vulnerabilities Vendor: Ajaxel Product web page: http://www.ajaxel.com Affected version: 8.0 and below Summary: Ajaxel CMS is very simple ajaxified CMS and framework for any project needs. Desc: Ajaxel CMS version 8.0 and below...

ZeewaysCMS - Multiple Vulnerabilities

ZeewaysCMS - Multiple Vulnerabilities ZeewaysCMS Multiple Vulnerabilities Software - ZeewaysCMS Vendor Product Description - ZeewaysCMS is a Content Management System and a complete Web & Mobile Solution developed by Zeeways for Corporates, Individuals or any kind of Business needs. - Site:...

Ajaxel CMS 8.0 - Multiple Vulnerabilities

Exploit for php platform in category web applications Ajaxel CMS 8.0 Multiple Vulnerabilities Vendor: Ajaxel Product web page: http://www.ajaxel.com Affected version: 8.0 and below Summary: Ajaxel CMS is very simple ajaxified CMS and framework for any project needs. Desc: Ajaxel CMS version 8.0 a...

Ajaxel CMS 8.0 Multiple Vulnerabilities

Summary Ajaxel CMS is very simple ajaxified CMS and framework for any project needs. Description Ajaxel CMS version 8.0 and below suffers from multiple vulnerabilities inlcuding LFI, XSS, SQL injection and remote code execution via CSRF. Ajaxel CMS 8.0 Multiple Vulnerabilities Vendor: Ajaxel...

IMDb Profile Widget <= 1.0.8 - Local File Inclusion (LFI)

The imdb-widget WordPress plugin was affected by a Local File Inclusion LFI security vulnerability...

Uber: Disclosure of ip addresses in local network of uber

Hi, i have found several DNS records at Google DNS server 8.8.8.8 pointing to Uber local servers: ▶ nslookup logs.uber.com Server: 8.8.8.8 Address: 8.8.8.853 Non-authoritative answer: Name: logs.uber.com Address: 10.6.0.1 ▶ nslookup kerberos.uber.com Server: 8.8.8.8 Address: 8.8.8.853...

ATSCAN v6.2 - Search / Site / Server Scanner

Description: SEARCH engine XSS scanner. Sqlmap. LFI scanner. Filter wordpress and Joomla sites in the server. Find Admin page. Decode / Encode MD5 + Base64. Ports scan. Scan E-mails in sites. Use proxy. Random user agent. Fandom search engine. Scan errors. Detect Cms. Multiple instant scan...

PLANET IP ICA-5350V LFI / XSS / CSRF / Bypass

Overview ======= Technical Risk: high Likelihood of Exploitation: medium Tested version: ICA-5350V/ICA- Credits: Discovered and researched by GT.Omaz from OrwellLabs Issues ===== I. Local File Inclusion II. Arbitrary file read/Authentication bypass III. Sensitive information disclosure IV...

Joomla Component com_hikashop LFI

Local file include vulnerability in Joomla Component comhikashop Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

V3n0M-Scanner - Popular SQLi and Pentesting Scanner

V3n0M runs on Python3 Live Project - Readding old features back in and improved for Python3 v3n0m is a free and open source scanner. Evolved from baltazar's scanner, it has adapted several new features that improve fuctionality and usability. It is mostly experimental software. This program is fo...

ParanoicScan - Vulnerability Scanner

Old Options Google & Bing Scanner that also scan : XSS SQL GET / POST SQL GET SQL GET + Admin Directory listing MSSQL Jet Database Oracle LFI RFI Full Source Discloure HTTP Information SQLi Scanner Bypass Admin Exploit FSD Manager Paths Finder IP Locate Crack MD5 Panel Finder Console Fixes +...

ManageEngine ServiceDesk Plus 9.1 LFI

Local file include vulnerability in ManageEngine ServiceDesk Plus Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ATSCAN - Server, Site and Dork Scanner

Description: ATSCAN Version 2 Dork scanner. XSS scanner. Sqlmap. LFI scanner. Filter wordpress and Joomla sites in the server. Find Admin page. Decode / Encode MD5 + Base64. Libreries to install: ap-get install libxml-simple-perl NOTE: Works in linux platforms. Permissions & Executution: $chmod +...