CMS Subkarma Cross Site Scripting / SQL Injection

Multiple SQL Injection & XSS on CMS SUBKARMA Risk: High CWE number: CWE-89,CWE-79 Date: 13/10/2014 Vendor: www.jttel.com.tw Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Linux Mint ; Firefox ; Sqlmap 1.0-dev-nongit-20140906 Vulnerables File: news.php ; product.php ;...

MVO - Maquina Vendas Online SQL Injection

SQL Injection on MVO ? - M?quina Vendas Online Risk: High CWE number: CWE-89 Date: 13/10/2014 Vendor: adnweb.es Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Linux Mint ; Firefox ; Sqlmap 1.0-dev-nongit-20140906 Vulnerable File: product.php Exploits:...

@CMS 2.1.1 SQL Injection

SQL Injection on @CMS 2.1.1 Stable Risk: High CWE number: CWE-89 Date: 22/08/2014 Vendor: www.atcode.net Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Linux Mint Vulnerable File: articles.php Exploit: http://host/articles.php?catid=SQLI PoC:...

CMS Agencija O2 Cross Site Scripting / SQL Injection

SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: [email protected] Tested on: Windows 8 pro & Linux Mint Vulnerable File: category.php Exploits: http://host/cms/category.php?qcatid=SQLI & X...

CMS Agencija O2 Cross Site Scripting / SQL Injection Vulnerabilities

CMS Agencija O2 suffers from cross site scripting and remote SQL injection vulnerabilities. SQL Injection & XSS on CMS Agencija O2 Risk: High CWE number: CWE-89,CWE-79 Date: 22/08/2014 Vendor: Agencija O2 Author: Felipe " Renzi " Gabriel Contact: email protected Tested on: Windows 8 pro & Linux...

CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected...

Quack Chat 1.0 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0...

WordPress Simple Login Registration 1.0.1 Cross Site Scripting

Exploit Title: Cross Site Scripting WP Simple Login Registration 1.0.1 - Wordpress Date: 26 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://envato.dropntheme.com/wp-simple-login-registration-plugin/ Tested on: Win8 & Linux Mint Affected...

CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities

CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/...

CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities

Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected Version : 1.8 & Anteriores. Contacts...

Quack Chat 1.0 - Multiple Vulnerabilities

Quark Chat version 1.0 suffers from cross site scripting, path disclosure, and remote SQL injection vulnerabilities. Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage:...

Quack Chat 1.0 - Multiple Vulnerabilities

Quack Chat 1.0 - Multiple Vulnerabilities Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0...

Quack Chat 1.0 - Multiple Vulnerabilities

Exploit Title: Quack Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...

Quark Chat 1.0 XSS / SQL Injection / Path Disclosure

Exploit Title: Quark Chat 1.0 - XSS / SQL Injection / Path Diclosure Date: 15 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.quack-chat.com/ Tested on: Win8 & Linux Mint Affected Version : 1.0 Contacts: https://twitter.com/Dylanirzi11...

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint...

Wordpress Booking Calendar 4.1.4 - CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Versi...

WordPress Plugin Booking Calendar 4.1.4 - Cross-Site Request Forgery

Exploit Title: CSRF Plugin Booking Calendar 4.1.4 � WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Version : 4.1.4 Contacts: https://twitter.com/Dylanirzi11 ,...

Booking Calendar 4.1.4 Cross Site Request Forgery

Exploit Title: CSRF Plugin Booking Calendar 4.1.4 – WordPress Date: 04 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://wpbookingcalendar.com/ Tested on: Win8 & Linux Mint Affected Version : 4.1.4 Contacts: https://twitter.com/Dylanirzi11 ,...

Joomla LiveChat 2.0 XSS / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - LiveChat 2.0 Multilpes...

Contacto SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Twitte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Diseño CONTACTO - Sql Injection Vulnerability...