Woltlab Burning Board Regenbogenwiese 2007 Addon - SQL Injection

Exploit Title: Woltlab Burning Board Regenbogenwiese 2007 Addon SQL Injection Exploit Google Dork: inurl:regenbogenwiese.php wbb and more Date: 04.09.2013 Exploit Author: Easy Laster Software Name: Regenbogenwiese v1.5 © 2007 by DieKrabbe Version: 1.5 Tested on: Windows 8/Backtrack !/usr/bin/ruby...

KNet Web Server 1.04b - Buffer Overflow SEH Vulnerability

Exploit for windows platform in category remote exploits !/usr/bin/ruby Exploit Title: KNet Web Server Buffer Overflow SEH Date: 2013-03-27 Exploit Author: Myo Soe, http://yehg.net/ Software Link: http://www.softpedia.com/progDownload/KNet-Download-20137.html Version: KNet 1.04b Tested on: Window...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Blind SQL Injection

The "order" and "orderby" parameter is vulnerable for SQL Injection Example URL: http://127.0.0.1:9001/wordpress/wp-admin/admin.php?page=3Din= icfaq&orderby=3D PoC take some time to finish 15min on my Testsystem. I could speed it up with Multithreading but I'm to lazy right now Vulnerable code pa...

WordPress IndiaNIC FAQS Manager 1.0 SQL Injection

Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin Blind SQL Injection Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://wordpress.org/extend/plugins/faqs-manager/ Software Link:...

ClanSphere 2011.3 - cs_lang Cookie Local File Inclusion

ClanSphere 2011.3 - cslang Cookie Local File Inclusion Exploit Title: ClanSphere 2011.3 cslang cookie parameter Local File Include Vulnerability Google Dork: "Copyright 2012 Seitentitel. All rights reserved." || inurl:index.php?mod=clansphere Date: 10/22/2012 Author: Marco Tulio blkhtc0rp Vendor...

Drupal CAPTCHA Logic Security Flaw

Drupal Captcha bruteforcing bypass This is a Proof Of Concept to demonstrate a logic security flow in the way drupal captcha is used to protect login forms from bruteforce. If the captcha challenge is solved, the next login attempts can be issued without solving any new captcha challenge. Usage:...

Woltlab Burning Board Userlocator v2.5 SQL injection Exploit

Exploit for php platform in category web applications ============================================================ Woltlab Burning Board Userlocator v2.5 SQL injection Exploit ============================================================...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

Woltlab Burning Board Userlocator 2.5 - SQL Injection ----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board Userlocator V2.5 Hack +Download : ---- +Price : lizenz...

mygamingladder MGL Combo System 7.5 SQL Injection

----------------------------Information------------------------------------------------ +Name : mygamingladder MGL Combo System = 7.5 game.php SQL injection Exploit +Autor : Easy Laster +Date : 10.10.2010 +Script : mygamingladder MGL Combo System = 7.5 +Price : 120$ +Language : PHP +Discovered by...

PHPKit 1.6.1 R2 SQL Injection

----------------------------Information------------------------------------------------ +Name : PHPKit = 1.6.1 R2 overview.php SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 22.10.2010 +Script : PHPKit 1.6.1 R2 +Price : free +Language : PHP +Discovered by Easy Laster +Security...

Joomla JE Job SQL Injection

----------------------------Information------------------------------------------------ +Name : joomla JE Job Component = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Job Component +Demo : http://joomlaextensions.co.in/jobcomponent/ +Download :...

Joomla! Component JE Directory 1.0 - SQL Injection

----------------------------Information------------------------------------------------ +Name : joomla JE Directory = SQL injection Vulnerability Exploit +Autor : Easy Laster +Date : 30.09.2010 +Script : joomla JE Directory +Demo : http://joomlaextensions.co.in/jedirectory/ +Download :...

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service

PMSoftware Simple Web Server 2.1 - From: Header Processing Remote Denial of Service source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding,...

PMSoftware Simple Web Server 2.1 - 'From:' Header Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/42155/info PMSoftware Simple Web Server is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to stop responding, denying service to legitimate users. Simple Web Server 2.1 is vulnerable; other...

2daybiz Freelance Script SQL Injection

Demo for the Exploit-DB Admin : http://www.2daybiz.com/products/freelancer/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Freelance Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2daybiz Photo Sharing Script SQL Injection

The Demo for the exploit-db Admin : http://www.2daybiz.com/products/efota/ ----------------------------Information------------------------------------------------ +Name : 2daybiz Photo Sharing Script = SQL Injection Vulnerability Exploit +Autor : Easy Laster +ICQ : 11-051-551 +Date : 27.06.2010...

2DayBiz ybiz Freelance Script - SQL Injection

2DayBiz ybiz Freelance Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/freelancescript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz ybiz Polls Script - SQL Injection

2DayBiz ybiz Polls Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/pollsscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz Photo Sharing Script - SQL Injection (2)

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/photosharingscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and 4004-Security-Project...