WordPress Plugin Frontend Upload - Arbitrary File Upload

WordPress Plugin Frontend Upload - Arbitrary File Upload Exploit Title: Frontend Upload Wordpress Plugin - File Arbitrary Upload Date: 10/02/2014 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Frontend Upload...

MySQL Squid Access Report 2.1.4 - HTML Injection

MySQL Squid Access Report 2.1.4 - HTML Injection Exploit Title: MySQL Squid Access Report 2.1.4 / HTML Injection Date: 23/07/2012 Author: Daniel Godoy Author Mail:DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software web: http://sourceforge.net/projects/mysar/ Test...

Webify Link Directory SQL Injection

Exploit Title: Webify Link Directory / SQL Injection Date: 04/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://webify.ws/index.php?page=getapp&id=10 Tested on: Linux Dork: allinurl: index.php?page=browse&id=...

CLscript Classified Script 3.0 - SQL Injection

Exploit Title: CLscript - Classified Script 3.0 / SQL Injection Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://www.phpkode.com/scripts/item/clscript-classified-script/ Tested on: Linux Dork:...

Emesene 2.12.5 Password Disclosure

Exploit Title: Emesene Password Disclosure Category: Local Date: 29/06/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://blog.emesene.org/p/downloads.html Tested on: Linux The only requirement to run the script ...

Emesene 2.12.5 - Password Disclosure

Emesene 2.12.5 - Password Disclosure Exploit Title: Emesene Password Disclosure Category: Local Date: 29/06/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://blog.emesene.org/p/downloads.html Tested on: Linux Th...

Unijimpe Captcha Cross Site Scripting

Exploit Title: Captcha unijimpe XSS Vulnerability Date: 15/05/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar http://blog.unijimpe.net/crear-captcha-con-php/ Tested on: Linux Dork: allinurl: "captchademo.php" Comment Greetz: Mazt...

Zubrag.com File Upload Form Shell Upload

Exploit Title: File Upload Form File Arbitrary Upload Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: File Upload Form http://www.zubrag.com/scripts/file-upload-form.php Tested on: Linux Comment Greetz: Hern...

Ajax Upload Arbitrary File Upload

Exploit for multiple platform in category web applications Exploit Title: Ajax Upload Arbitrary File Upload Date: 30/01/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Ajax Upload http://valums.com/ajax-upload/ Tested o...