Zoph 0.9.1 Cross Site Scripting / SQL Injection Vulnerabilities

Zoph versions 0.9.1 and below suffer from cross site scripting and remote SQL injection vulnerabilities. I. VULNERABILITY ------------------------- Multiple Vulnerabilities in Zoph alert1 /zoph/php/editphotos.php?albumid=2&crumb=3"alert1 V. BUSINESS IMPACT ------------------------- Public...

WebsiteBaker 2.8.3 Multiple Vulnerabilities

WebsiteBaker versions 2.8.3 and below suffers from cross site scripting, HTTP response splitting, and remote SQL injection vulnerabilities. I. VULNERABILITY ------------------------- Multiple Vulnerabilities in WebsiteBaker 2.8.3 II. BACKGROUND ------------------------- WebsiteBaker helps you to...

Piwigo <= v2. 6. 0 - Blind SQL Injection-vulnerability warning-the black bar safety net

Piwigo = v2. 6. 0 - Blind SQL Injection -------------------------------------------------------------------------------- From: Manuel Garcia Cardenas Date: Wed, 1 2 Nov 2 0 1 4 0 9:5 6:2 2 +0 1 0 0 --------------------------------------------------------------------------------...

Piwigo 2.6.0 - picture.php?rate SQL Injection

Piwigo 2.6.0 - picture.php?rate SQL Injection ============================================= MGC ALERT 2014-001 - Original release date: January 12, 2014 - Last revised: November 12, 2014 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score...

Piwigo 2.6.0 - 'picture.php?rate' SQL Injection

============================================= MGC ALERT 2014-001 - Original release date: January 12, 2014 - Last revised: November 12, 2014 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

Piwigo 2.6.0 SQL Injection

============================================= MGC ALERT 2014-001 - Original release date: January 12, 2014 - Last revised: November 12, 2014 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY...

vldPersonals 2.7 - Multiple Vulnerabilities

Exploit Title: VLD Personal – Multiple Vulnerabilities Date: 09/11/2014 Exploit Author: Mr T Exploit Authors Website: http://www.securitypentester.ninja Vendor Homepage: http://www.vldpersonals.com/ Software Link: http://www.vldpersonals.com/clients/downloads.php Vulnerable Version: 2.7 Fixed...

Dashing Times SQL Injection Vulnerability

Exploit for php platform in category web applications dashing times cms scripts, sql injection vulnerability. products page: http://www.dashingtimes.in/portfolio/ authorpentester: 3spi0n on social: twitter.com/eyyamgudeer description i found vulnerability all cms scripts of dashingtimes web desig...

Scripts Genie Games Site Script (index.php, id param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Games Site Script, MySQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=gamessitescript...

Audiotran 1.4.2.4 SEH Overflow Exploit (DEP Bypass)

No description provided by source. Exploit Title: Audiotran 1.4.2.4 SEH Overflow Exploit DEP Bypass Date: 09/20/10 Credit/Bug found by : Author Abhishek Lyall - abhilyallatgmaildotcom, infoataslitsecuritydotcom Author: Muhamad Fadzil Ramli - mind1355 at gmail dot com Software Link:...

Scripts Genie Gallery Personals (gallery.php, L param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Gallery Personals Script SQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/ Product Page:...

Scripts Genie Top Sites (out.php, id param) - SQL Injection Vulnerability

No description provided by source. / / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Top Sites Script, SQL Injection Vulnerabilities Software Page: http://scriptsgenie.com/index.php?do=catalog&c=scripts&i=topsitescript...

MLMAuction Script (gallery.php, id param) - SQL Injection

No description provided by source. | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || MLMAuction Script, SQL Injection Vulnerabilities Product Page:...

ComSndFTP Server 1.3.7 Beta Remote Format String Overflow

No description provided by source. Title: ComSndFTP Server Remote Format String Overflow Vulnerability Software : ComSndFTP FTP Server Software Version : ComSndFTP 1.3.7 Beta Vendor: http://ftp.comsnd.com/ Vulnerability Published : 2012-06-07 Vulnerability Update Time : Status : Impact :...

Smart Pentester - An SSH based Penetration Testing Framework

Smart Pentester is an SSH based Penetration Testing Framework. It provides a GUI for well known tools like nmap, hping, tcpdump, volatility, hydra and etc. Smart Pentester Framework will provide you a User Interface for Penetration testing, Malware Analysis, Forensic Analysis, Cyber Intelligence,...

Crime24 Stealer Panel <= Multiple Vulnerabilities

An attacker can execute an XSS and inject sql commands in the search form. Usage Info You must be logged in the admin panel. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | \ | | | \ | | | |/ | / | | | | |/ / \ | | | |/ | ' \ | || | | | \ \ || | Twitter @TheHackersBay...

Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities

Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | \ | | | \ | | | |/ | / | | | | |/ / \ | | | |/ | ' \ | || | | | \ \ || | Twitter @TheHackersBay Pentester / Underground hacker Exploit Title: Crime24 Stealer Panel...

Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | \ | | | \ | | | |/ | / | | | | |/ / \ | | | |/ | ' \ | || | | | \ \ || | Twitter @TheHackersBay Pentester / Underground hacker Exploit Title: Crime24 Stealer Panel &in=1&search=Search Example: http://i.imgur.com/zyIr5xv.png...

Lowest Unique Bid Auction - SQL Injection

Lowest Unique Bid Auction - SQL Injection | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page:...

MLMAuction Script - gallery.php?id SQL Injection

MLMAuction Script - gallery.php?id SQL Injection | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || MLMAuction Script, SQL Injection Vulnerabilities Product Page:...