PicoPublisher 2.0 SQL Injection

Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Demo : http://picopublisher.com/demo/ Dork : intext:"Drives med...

Tiny Server <= 1.1.5 Information Disclosure Vulnerability - Active Check

Tiny Server is prone to arbitrary file disclosure vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Sepehr-Team Open Redirect

Exploit Title: Sepehr-Team Open Redirect Vulnerability Date: 03.03.2012 Author: l20ot Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ http://www.sepehr-team.org/forums/go.php?url=http://packetstormsecurity.org/...

Project Open cross-site scripting vulnerability

Overview Project Open po version 3.4 and possibly earlier versions suffer from a reflective cross-site scripting XSS vulnerability in the account-closed.tcl script Description The XSS vulnerability CWE-79 is contained within the message parameter in the account-closed.tcl script...

Joomla Boss Component LFI Vulnerability (Jan 2012) - Active Check

Joomla Boss component is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SQLiteManager <= 1.2.4 Multiple XSS Vulnerabilities

SQLiteManager is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

phpMyAdmin Setup '$host' Variable Cross Site Scripting Vulnerability

phpMyAdmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyNews 1.2 'basepath' Parameter Multiple Remote File Include Vulnerabilities

MyNews 1.2 is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the Web server...

iBrowser Plugin v1.4.1 (lang) Local File Inclusion Vulnerability

Summary iBrowser is an image browser plugin for WYSIWYG editors like tinyMCE, SPAW, htmlAREA, Xinha and FCKeditor developed by net4visions. It allows image browsing, resizing on upload, directory management and more with the integration of the phpThumb image library. Description iBrowser suffers...

Surge Media CMS SQL Injection

.. . || | | | | | | | | / | | \ | \ \ / | |/ // \ \ | | || Y Y \ | / Y / \ | | \ | / / / / / / .org Archieve an Resource About Hacking Exploit Title: Surgemedia Cms Sql Injection Vulnerability Author: Netrondoank Aka netron home Page: http://www.ilmuhacker.org Forum :...

IP Power 9258 TGI Scripts Unauthorized Access Vulnerability

IP Power 9258 is prone to an unauthorized-access vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DORG <= 1.8.5 (CSRF) Add new user Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Syctel Design Local File Inclusion

=========================================================================== Syctel Design Local File Inclusion Vulnerability =========================================================================== Name: Syctel Design Local File Inclusion Vulnerability Vendor: www.Syctel.Com Date: 2011-04-21...

Xoops 2.5.0 (banners.php) LFI Vulnerability

Exploit for php platform in category web applications Title : Xoops 2.5.0 banners.php LFI Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Local File Inclusion Tested on : Window...

AIOCP 1.4.001 - Cross-Site Request Forgery

Source: http://packetstormsecurity.org/files/view/98247/AIOCP-1.4.001-xsrf.txt img...

Raja Natarajan Guestbook 1.0 - Local File Inclusion

Raja Natarajan Guestbook 1.0 - Local File Inclusion Raja Natarajan GUestbook 1.0 Local File Inclusion Exploit App: http://sourceforge.net/projects/phpscript/files/phpscript/Raja%20Guestbook/guestbook1.0.zip/download Author: h0rd Vuln:...

Freefloat FTP Server Directory Directory Traversal Vulnerability

Freefloat FTP Server is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NCH Officeintercom 5.20 - Remote Denial of Service

NCH Officeintercom 5.20 - Remote Denial of Service !/usr/bin/python Exploit Title: NCH Officeintercom = v5.20 Remote Denial of Service Vulnerability Date: 11/24/2010 Author: xsploited security URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...

OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection

Exploit Title: OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Date: 13.11.2010 Author: Valentin Category: webapps/0day Version: 2.6.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Titl...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...