Joomla FocalPoint 1.2.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component FocalPoint 1.2.3 - SQL Injection Date: 2017-03-23 Home : https://extensions.joomla.org/extensions/extension/maps-a-weather/maps-a-locations/focalpoint/ Exploit Author: Persian Hack Team Discovered by : Mojtaba...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

CMS Elevel 1.0 Cross Site Scripting / SQL Injection

Exploit Title : CMS Elevel 1.0 - SQL Injection / XSS Exploit Author : Persian Hack Team Vendor Homepage : http://www.elevel.it/privacy.php Google Dork : "Web Design by Elevel" inurl:news.php Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: id Parameter Vulnerable To SQL / XSS...

Joomla Event Manager 2.x Cross Site Scripting

Exploit Title : Joomla Event Manager comjem - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.joomlaeventmanager.net/download Category: Webapps Tested on: Win Version: 2.x Date: 2016/05/11 PoC: itemid=XSS Payload = "PersianHack Team Demo :...

ChitaSoft CMS 3 Cross Site Scripting

Exploit Title : ChitaSoft v3 CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.chitasoft.com/products/3 Author Homepage : http://www.persian-team.ir Date: 2016/04/15 Version : 3 PoC: product.php?id=XSS Payload = ' Demo:...

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery...

ATOMYMAXSITE 2.5 Cross Site Scripting

Exploit Title : ATOMYMAXSITE CMS Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://maxtom.sytes.net/ Google Dork : "Power by : ATOMYMAXSITE 2.5" OR Powered by ATOMYMAXSITE 2.5 Date: 2015/12/23 Version = 2.5 Payload : "PersianHack Team Demo:...