E-SMART CART (productsofcat.asp) Remote SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com/ Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: E-SMART CART payment HomePage: http://www.preproject.com/ Exploit: Remote SQL Injection High Vuln file: productsofcat.asp...

PHP JOBWEBSITE PRO (JobSearch3.php) SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com/ Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: PHP JOBWEBSITE PRO payment HomePage: http://www.preproject.com/ Exploit: Remote SQL Injection High Vuln file: JobSearch3.php...

ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability

Info: Bug found by Jose Luis Gуngora Fernбndez JosS sys-projectathotmail.com http://www.spanish-hackers.com Spanish Hackers Team - SHT EspSeC & Hack0wn!. Software: ASPPortal Free Version HomePage: http://www.aspportal.net/ Exploit: Remote SQL Injection Vulnerability High Dork: "Powered by...

EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities

Info: Software: EasyGallery HomePage: http://myiosoft.com Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Verified in localhost with EasyGallery 5.0tr and magicquotes Off + Remote...

Unfixed Redirect vulnerability at www.mercadolivre.com.br

Security researcher Luis Guilherme Brunck, has submitted on 03/11/2008 a Redirect vulnerability affecting www.mercadolivre.com.br, which at the time of submission ranked 348 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

centreon1423-disclose.txt

Info: Software: Centreon user-getlang."/".$GET"page", "r"; + Exploit: /include/doc/index.php?page=../../www/oreon.conf.php /include/doc/index.php?page=../../../../../etc/passwd /include/doc/index.php?page=Local File...

Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability

JosS + Spanish Hackers Team + Sys - Project + Info: Software: Koobi CMS 4.3.0 - 4.2.3 HomePage: http://www.dream4.de/ Exploit: Remote SQL Injection High Where: index.php Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com +...

RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit

Info: Software: RichStrong CMS HomePage: http://www.hzrich.cn Exploit: Remote Sql Injection High Where: showproduct.asp?cat= Bug Found By: Jose Luis Gуngora Fernбndez|JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Dork: "Power by:RichStrong CMS" Dork2: Priv8, xD! +...

gradman-lfi.txt

Info: Software: Gradman new; my $req=HTTP::Request-newGET=$web1; $doc = $ua-request$req-asstring; if $doc= /^root/moxis print "Web is vuln\n"; else print "Web is not vuln\n";...

milliscripts (dir.php) Cross-Site Scripting Vulnerability

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

milliscripts-xss.txt

milliscripts dir.php Cross-Site Scripting Vulnerability Download: http://www.milliscripts.com/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "powered by milliscripts"...

Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection

Blakord Portal = Beta 1.3.A all modules Blind Sql Injection. + Info: Software: Blakord Portal HomePage: http://www.cdv3k.com Exploit: Blind Sql Injection High Where: All Modules Bug Found By: JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com...

SimpleForum <= 4.6.2 - Cross-Site Scripting Vulnerability

SimpleForum = 4.6.2 - Cross-Site Scripting Vulnerability Download: http://simpleforum.net/ Bug found by Jose Luis Gуngora Fernбndez / JosS! Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by...

smf-xss.txt

SimpleForum alertdocument.cookie alertdocument.cookie //---------------------------------------\ Greetz To: All Hackers Jose Luis Góngora Fernández / JosS!...

PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability

PHP iCalendar = 2.24 - Cross-Site Scripting Vulnerability Download: http://phpicalendar.net/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by P...

phpical-xss.txt

PHP iCalendar alertdocument.cookie //---------------------------------------\ Greetz To: All Hackers Jose Luis Góngora Fernández / JosS!...

PHPkit 1.6.1 (include.php?path=) Remote File Inclusion

PHPkit 1.6.1 include.php?path= Remote File Inclusion Download: http://www.webmasternet.de/ Bug found by Jose Luis Gongora Fernandez / JosS! Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "PHPKIT Version 1.6.1" Stop...

Gekko <=0.8.2 (temp directory) Path Disclosure

Gekko =0.8.2 temp directory Path Disclosure Download: http://www.gekkoware.org/ Bug found by JosS / Jose Luis Gуngora Fernбndez Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "Powered by Gekko" Stop lammer sensitive...

phpslideshow0992-xss.txt

Vendor Site: http://www.zinkwazi.com/wp/scripts/ Version affected: 0.9.9.2 URL:http://www.example.com/scripts/demo/phpslideshow.php?directory=photos BID ref: 26576 By Jose Luis Góngora Fernández PHPSlideShow is also susceptible the following inputs:...

phpkit-rfi.txt

PHPkit 1.6.1 include.php?path= Remote File Inclusion Download: http://www.webmasternet.de/ Bug found by Jose Luis Góngora Fernández / JosS! Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join fullsecure d0rk: "PHPKIT Version 1.6.1" Stop...