Joomla Component (com_catalogue) LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comcatalogue LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /...

Quick.Cart Multiple Vulnerabilities

Exploit for php platform in category web applications =================================== Quick.Cart Multiple Vulnerabilities =================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1...

Joomla Component com_joomlapicasa2 LFI Vulnerability

Exploit for php platform in category web applications ==================================================== Joomla Component comjoomlapicasa2 LFI Vulnerability ==================================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/...

Global Travel SQL Injection

======================================================= Global Travel Promodetail.asp SQL Injection Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date :...

Entrans 0.3.2 Cross Site Scripting / SQL Injection

======================================= Vulnerability ID: HTB22606 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinentrans.html Product: Entrans Vendor: Khader Abbeb N http://sourceforge.net/projects/entrans/ Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: ...

SQL injection vulnerability in Entrans

Vulnerability ID: HTB22607 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinentrans.html Product: Entrans Vendor: Khader Abbeb N http://sourceforge.net/projects/entrans/ Vulnerable Version: 0.3.2 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability...

Pixel Post v1.7.3 persian Reinstall login Vulnerability

Exploit for php platform in category web applications ======================================================= Pixel Post v1.7.3 persian Reinstall login Vulnerability ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Storyteller CMS Local File Inclusion

== Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$var if fileexists"templates/$var.tmp.php"...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Microsoft Windows Based Script Host (Plugin.ocx) DLL Hijacking

Exploit for windows platform in category local exploits ============================================================== Microsoft Windows Based Script Host Plugin.ocx DLL Hijacking ==============================================================...

CentOS Update for seamonkey CESA-2010:0557 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0557 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Kleeja 1.0.0RC6 Database Disclosure

==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug : Database Disclosure Exploit Tested on ...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Advanced File Vault - 'eSellerateControl350.dll' ActiveX HeapSpray

// Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode = unescape"%uE860%u0000%u0000%u815D%u06ED%u0000%u8A00%u1285%u0001%u0800" +...

Quick N Easy Web Server 3.3.7 Denial Of Service

DCA-0008 Software - Quick 'n Easy WEB Server Vendor Product Description - Do you want run your own personal webserver or just want to test your ASP/PHP scripts before you upload them to your webhosting server? No problem, Quick ’n Easy Web Server can handle it! Quick ‘n Easy Web Server for Window...

EZ-Oscommerce 3.1 Cross Site Request Forgery / Shell Upload

==================================================== EZ-Oscommerce 3.1 Remote File Upload EZ-Oscommerce 3.1 Changer Login et Mot de Passe CSRF Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Quick N Easy FTP Server 3.2 Denial Of Service

DCA-0007 Software - Quick 'n Easy FTP Server Vendor Product Description - Quick 'n Easy FTP Server Professional is a multi threaded FTP server for Windows 98/NT/XP and Vista32 bits that can be easily setup even by inexperienced users. New users can be easily created by a wizard which is guiding y...

3dl.am script mtxkl raidrush Multiple Vulnerabilty

Exploit for php platform in category web applications ============================================================== 3dl.am script mtxkl raidrush Directory Traversal Vulnerability ==============================================================...

CVE-2010-2844: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in newsshow.php in Newanz NewsOffice 2.0.18 allows remote attackers to inject arbitrary web script or HTML via the n-cat parameter...