Time and Expense Management System Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...

BigAce 2.7.5 File Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Allomani Movies Library 2.0 - Cross-Site Request Forgery (Add Admin)

Allomani Movies Library 2.0 - Cross-Site Request Forgery Add Admin Movies Library 2.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/moviesscript.html === Exploit ===...

Indian Embassy Of Sweden Hacked by Root@localhost - ZCompany Hacking Crew !

Indian Embassy Of Sweden Hacked by Root@localhost - ZCompany Hacking Crew ! WebSite : Mirror 1 : Mirror 2 : News Source : ZCompany Hacking Crew...

SnapProof Cross Site Scripting

Exploit Title: SnapProof cart.php Cross Site Scripting Google Dork: inurl:"Created and powered by SnapProof" home : www.D99Y.com Date: 1/3/2011 Author: Difficult 511 Software Link: http://www.snapproof.com/ file : cart.php exploit : http://localhost/cart.php?retPageID= XSS...

OmegaBill 1.0 Build 6 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................OmegaBill v1.0 Build 6 Vulnerability...........Arbitrary PHP Execution Download................http://sourceforge.net/projects/omegabill/ Release...

Lingxia I.C.E CMS - Blind SQL Injection

Lingxia I.C.E CMS - Blind SQL Injection !/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme -...

Majordomo2 - 'SMTP/HTTP' Directory Traversal

Original Advisory: https://sitewat.ch/en/Advisory/View/1 Credit: Michael Brooks https://sitewat.ch Vulnerability: Directory Traversal Software: Majordomo2 Identifier:CVE-2011-0049 Vendor: http://www.mj2.org/ Affected Build: 20110121 and prior Google dork:inurl:mjwwwusr Special thanks to Dave...

Design/Logic Flaw

librpc.dll in nsrexecd in EMC NetWorker before 7.5 SP4, 7.5.3.x before 7.5.3.5, and 7.6.x before 7.6.1.2 does not properly mitigate the possibility of a spoofed localhost source IP address, which allows remote attackers to 1 register or 2 unregister RPC services, and consequently cause a denial o...

MultiCMS - Local File Inclusion

Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt =============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor: http://www.multicms.net Status: FIXED Test...

Crystal Web Solutions SQL Injection

============================================================= Crystal Web Solutions category.php SQL Injection ============================================================= Vendor: Crystal Web Solutions http://www.crystal-web.co.uk Vendor Notification: 02 Jan 2011 Vulnerability Type: SQL Injectio...

httpdASM 0.92 Directory Traversal

Exploit for windows platform in category remote exploits ------------------------------------------------------------------------ Software................httpdASM 0.92 Vulnerability...........Directory Traversal Download................http://www.japheth.de/httpdASM.html Release...

Joomla Component btg_oglas HTML & XSS Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Component btgoglas HTML & XSS Injection Vulnerability ============================================================= Author : CoBRa21 Dork : inurl:btgoglas Sql Injection :...

Dolphin 7.0.3 File Disclosure / SQL Injection

===================================================================== Dolphin Vulnerability SQL Injection / disclosure Vulnerability ===================================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

hplip - 'hpssd.py' From Address Arbitrary Command Execution (Metasploit)

$Id: hpliphpssdexec.rb 10617 2010-10-09 06:55:52Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

nileweb School CMS injection vulnerability-vulnerability warning-the black bar safety net

nileweb School CMS program index. php parameter filtering is not strictly the presence of injection vulnerabilities. Batch google. cn inurl:index. php? action= http://localhost/index.php?action=cms/showpaget&pageid=-21+/! uniOn/+select+1,convertgrOupcOncatusername,0x3a,password using...

Powered by wpQuiz (install) Change Password Vulnerability

Exploit for php platform in category web applications ========================================================= Powered by wpQuiz install Change Password Vulnerability ========================================================= + Author : wlhaan hacker + Email : email protected + Site : n/a + team...

Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption

Exploit for windows platform in category dos / poc ==================================================================== Ipswitch Imail Server List Mailer Reply-To Address Memory Corruption ==================================================================== Title : Ipswitch Imail Server List Mail...

Group Office 3.5.9 - SQL Injection

Group Office 3.5.9 - SQL Injection ===================================================================================== Group Office /notes/json.php?task=category&categoryid SQL Injection Vulnerability ===================================================================================== Author :...

sX-Shop Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications =================================== sX-Shop SQL Injection Vulnerability =================================== Author : CoBRa21 Author Web Page :http://ipbul.org Dork : "powered by sX-Shop" Script Page : http://www.source-worx.de/ Demo :...