Epop Studio XSS/SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ES CmS 0.1 - SQL Injection

Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc :...

Sql injection

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

CVE-2012-5912: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PicoPublisher 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 page.php or 2 single.php...

Sql injection

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5333

CVE-2012-5333 pertains to a SQL injection vulnerability in the application component: page.php of the Pre Printing Press product. The issue is triggered by the id parameter, allowing remote attackers to execute arbitrary SQL commands. This vulnerability is rated with a CVSS v2 base score of 7.5 (...

CVE-2012-5333: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter...

phpMyDirectory 'id' Parameter SQL Injection Vulnerability

phpMyDirectory is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-5288: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in phpMyDirectory 1.3.3 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-5139: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter...

HCAMindbox CMS SQL Injection

Exploit Title: HCAMindbox cms Sql Injection Vulnerability Google Dork: Intext:"powered by Data Management Products" Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home : http://www.hcamindbox.com/ Tested on: all ================================== + id parametr in page.php is...

VLinks 2.0.3 SQL Injection

!x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM Miss !x! Bug: Bugged file is...

PicoPublisher v2.0 Remote SQL injection

Exploit for php platform in category web applications Exploit Title : PicoPublisher v2.0 Remote SQL injection Date : 29/03/2012 Author : ZeTH Contact : zeth/at/hacktheplan8/dot/com http://www.hacktheplan8.com Vendor : Pico Software Site : http://pico.no/ Version : 2.0 Price : $29,00 Dork :...

Posse Sports SQL Injection

Exploit Title: Posse Sports SQL Injection Vulnerabilitiy Google Dork: "Powered By Posse Sports" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.possesports.com Version: All Version Category:: webapps Security Risk:: High Tested o...

SyriaNobles SQL Injection

Exploit Title: SyriaNobles SQL Injection Vulnerabilitiy Google Dork: inurl:view-page.php "Powered by SyriaNobles" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubun...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App. :...

MyPHPDating 1.0 - SQL Injection

MyPHPDating 1.0 - SQL Injection MyPHPDating 1.0 SQL Injection Vulnerability \ ==============================================\ Software : MyPHPDating version 1.0 \ Date : 1/1/2012 \ Vendor : http://www.phponlinedatingsoftware.com/ \ Demo : http://www.phponlinedatingsoftware.com/demo.htm \ Get App....

CVE-2010-5047: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

Pre Studio Business Cards Designer SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Software Link: http://www.preprojects.com/card.asp proof o...