EzPub Simple Classic ASP CMS - SQL Injection

Title: EzPub - Simple Classic ASP CMS Vulnerable to SQL Injection Vendor: http://www.soft4web.ro Found by: p0pc0rn 08/03/2011 Dork: intext:"Powered by EZPub" SQL - Microsoft JET Database Engine error ------------------------------------------ viewarticle.asp?item=SQL...

Wired-Media Pte Ltd CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Title : Wired-Media Pte Ltd CMS Multiple Vulnerabilities Web : http://www.wm.tm Found by: p0pc0rn 05/03/2011 Dork : inurl:"index.cfm?GPID=" SQL --- http://site.com/index.cfm?GPID=SQL XSS --- http://site.com/index.cfm?GPID=XSS POC ---...

CYSM CMS Vulnerable SQL Injection Vulnerability

Exploit for php platform in category web applications Web : http://www.cysm.com.mx Found by: p0pc0rn 01/03/2011 SQL --- http://site.com/Page.asp?Id=SQL POC --- http://site.com/Page.asp?Id=1337 UNION SELECT 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 from users...

RaksoCT Multiple SQL Injection Vulnerabilities

Exploit for asp platform in category web applications Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection Web : http://raksoct.com/ Found By : p0pc0rn 25/02/2011 Blind SQL ---------- 1 - Parameter gallerydetails.asp?aid=Blind SQL POC --- http://site.com//gallerydetails.asp?aid=12' an...

JuiceAPac CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Found by: p0pc0rn 24/02/2011 Web : http://www.juiceapac.com Dork : intext:"Powered by JuiceAPac" filetype:cfm SQL --- http://site.com/xxxx.cfm?xxx=SQL XSS --- http://site.com/search.cfm POST: THEKEYWORDS=XSS&year=XSS...

Alcassofts SOPHIA CMS - SQL Injection

Alcassofts SOPHIA CMS - SQL Injection Title : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection Found by: p0pc0rn 24/02/2011 Web : http://www.alcassoft.com/site/ Dork : intext:"Powered by Alcassoft SOPHIA" SQL --- http://site.com/path/dsppage.cfm?pageid=SQL...

Alcassoft's SOPHIA CMS - SQL Injection

Title : Alcassoft's SOPHIA CMS Vulnerable to SQL Injection Found by: p0pc0rn 24/02/2011 Web : http://www.alcassoft.com/site/ Dork : intext:"Powered by Alcassoft SOPHIA" SQL --- http://site.com/path/dsppage.cfm?pageid=SQL...

Unfixed XSS vulnerability at yp.colusa-sun-herald.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting yp.colusa-sun-herald.com, which at the time of submission ranked 3124516 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It ...

Unfixed XSS vulnerability at search.kenoshanews.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting search.kenoshanews.com, which at the time of submission ranked 89823 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Unfixed XSS vulnerability at ultimateguide.buffalonews.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting ultimateguide.buffalonews.com, which at the time of submission ranked 13824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. ...

Unfixed XSS vulnerability at yp.midvalleytowncrier.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting yp.midvalleytowncrier.com, which at the time of submission ranked 8441035 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It...

Unfixed XSS vulnerability at www.ziphip.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting www.ziphip.com, which at the time of submission ranked 24436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

DIY Web CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications SQL and XSS in DIY Web CMS found by : p0pc0rn 22/2/2011 web : http://www.mydiyweb.com.my dork : intext:"powered by DiyWeb" SQL - Microsoft JET Database Engine error -----------------------------------------...

Unfixed XSS vulnerability at yellowpages.totallylocal.com

Security researcher p0pc0rn, has submitted on 23/02/2011 a cross-site-scripting XSS vulnerability affecting yellowpages.totallylocal.com, which at the time of submission ranked 118891 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. ...

DIY Web CMS SQL Injection / Cross Site Scripting

SQL and XSS in DIY Web CMS found by : p0pc0rn 22/2/2011 web : http://www.mydiyweb.com.my dork : intext:"powered by DiyWeb" SQL - Microsoft JET Database Engine error ----------------------------------------- http://site.com/template.asp?menuid=SQL http://site.com/viewcatalog.asp?id=SQL...

DIY Web CMS - Multiple Vulnerabilities

SQL and XSS in DIY Web CMS found by : p0pc0rn 22/2/2011 web : http://www.mydiyweb.com.my dork : intext:"powered by DiyWeb" SQL - Microsoft JET Database Engine error ----------------------------------------- http://site.com/template.asp?menuid=SQL http://site.com/viewcatalog.asp?id=SQL...

Unfixed XSS vulnerability at commerce.usinternet.com

Security researcher p0pc0rn, has submitted on 17/02/2011 a cross-site-scripting XSS vulnerability affecting commerce.usinternet.com, which at the time of submission ranked 642256 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.hotfilesearch.com

Security researcher p0pc0rn, has submitted on 28/01/2011 a cross-site-scripting XSS vulnerability affecting www.hotfilesearch.com, which at the time of submission ranked 3666 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at wikitree.co.kr

Security researcher p0pc0rn, has submitted on 20/11/2010 a cross-site-scripting XSS vulnerability affecting wikitree.co.kr, which at the time of submission ranked 33468 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Unfixed XSS vulnerability at www.lib.udel.edu

Security researcher p0pc0rn, has submitted on 09/12/2010 a cross-site-scripting XSS vulnerability affecting www.lib.udel.edu, which at the time of submission ranked 19089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is current...