WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

The "order" and "orderby" parameter is vulnerable for SQL Injection Example URL: http://127.0.0.1:9001/wordpress/wp-admin/admin.php?page=3Din= icfaq&orderby=3D PoC take some time to finish 15min on my Testsystem. I could speed it up with Multithreading but I'm to lazy right now Vulnerable code pa...

ClanSphere 2011.3 - cs_lang Cookie Local File Inclusion

ClanSphere 2011.3 - cslang Cookie Local File Inclusion Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor...

Drupal CAPTCHA Logic Security Flaw

Drupal Captcha bruteforcing bypass This is a Proof Of Concept to demonstrate a logic security flow in the way drupal captcha is used to protect login forms from bruteforce. If the captcha challenge is solved, the next login attempts can be issued without solving any new captcha challenge. Usage:...

Woltlab Burning Board Userlocator v2.5 SQL injection Exploit

Exploit for php platform in category web applications ============================================================ Woltlab Burning Board Userlocator v2.5 SQL injection Exploit ============================================================...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

Woltlab Burning Board Userlocator 2.5 - SQL Injection ----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board Userlocator V2.5 Hack +Download : ---- +Price : lizenz...

PHPKit 1.6.1 R2 SQL Injection

----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...

mygamingladder MGL Combo System 7.5 SQL Injection

----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 game.php SQL injection Exploit +Autor : Easy Laster +Date : 10.10.2010 +Script : mygamingladder MGL Combo System = 7.5 +Price : 120$ +Language : PHP +Discovered by...

Joomla JE Job SQL Injection

----------------------------Information------------------------------------------------ +Name : joomla JE Job Component = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Job Component +Demo : http://joomlaextensions.co.in/jobcomponent/ +Download :...

Joomla! Component JE Directory 1.0 - SQL Injection

----------------------------Information------------------------------------------------ +Name : joomla JE Directory = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Directory +Demo : http://joomlaextensions.co.in/jedirectory/ +Download :...

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding,...

PMSoftware Simple Web Server 2.1 - 'From:' Header Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding, denying service to legitimate users. Simple Web Server 2.1 is vulnerable; other...

2daybiz Freelance Script SQL Injection

Demo for the Exploit-DB Admin : http://www.2daybiz.com/products/freelancer/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Freelance Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2daybiz Photo Sharing Script SQL Injection

The Demo for the exploit-db Admin : http://www.2daybiz.com/products/efota/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Photo Sharing Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2DayBiz ybiz Freelance Script - SQL Injection

2DayBiz ybiz Freelance Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/freelancescript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz ybiz Polls Script - SQL Injection

2DayBiz ybiz Polls Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz Photo Sharing Script - SQL Injection (2)

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/photosharingscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and 4004-Security-Project...

2DayBiz ybiz Polls Script - SQL Injection

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and 4004-Security-Project...

phpscripte24 Live Shopping Multi Portal System - SQL Injection

phpscripte24 Live Shopping Multi Portal System - SQL Injection ----------------------------Information--------------------------------------------------- +Name : phpscripte24 Live Shopping Multi Portal System SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date :...