ETchat 3.7 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows...

ETchat 3.7 - Cross-Site Request Forgery

ETchat 3.7 - Cross-Site Request Forgery Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows 7 / Kali Linu...

ETchat 3.7 - Cross-Site Request Forgery

Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows 7 / Kali Linux Category: WebApps Dork : User Your Min...

ETchat 3.7 Cross Site Request Forgery

Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows 7 / Kali Linux Category: WebApps Dork : User Your Min...

Joomla DVFolderContent 1.0.2 Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date...

Joomla DVFolderContent 1.0.2 Local File Disclosure

Exploit Title : Joomla DVFolderContent V1.0.2 Module - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://www.dvextensions.de/en/extensions/dvfoldercontent Category Webapps Tested on Win Version : V1.0.2 Date 2016/10/01 PoC The Vulnerable page is...

WordPress KBoard 2.7 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps...

WordPress KBoard Cross Site Scripting

Exploit Title : WordPress Plugin KBoard - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : Before 4.4 Date 2016/09/26 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

WordPress KBoard 2.7 SQL Injection

Exploit Title : WordPress Plugin KBoard 2.7 - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Google Dork : intitle:"KBoard 2.7" Vendor Homepage : http://www.cosmosfarm.com/products/kboard Category Webapps Tested on Win Version : 2.7 Date 2016/09/26 PoC = Sql...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

Joomla! Component Event Booking 2.10.1 - SQL Injection

Joomla! Component Event Booking 2.10.1 - SQL Injection Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version ...

Joomla Event Booking 2.10.1 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version :...

Joomla Event Booking 2.10.1 SQL Injection

Exploit Title : Joomla Event Booking Component - SQL Injection Exploit Author : Persian Hack Team Homepage : http://persian-team.ir Vendor Homepage : http://extensions.joomla.org/extension/event-booking Category Webapps Tested on Win Version : 2.10.1 Date 2016/09/25 PoC = Sql Injection : Date...

Joomla jVoteSystem 2.56 Cross Site Scripting

Exploit Title : Joomla jVoteSystem 2.56 Component - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://joomess.de/projects/jvotesystem Category Webapps Tested on Win Version : 2.56 Date 2016/09/08 PoC =Cross Site Scripting : Payload : 1" onmouseover=prompt"Persian"...

Joomla jVoteSystem 2.56 SQL Injection

Exploit Title : Joomla jVoteSystem 2.56 Component - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : https://joomess.de/projects/jvotesystem Category Webapps Tested on Win Version : 2.56 Date 2016/09/08 PoC = Sql Injection : Keyword Parameter Vulnerable To SQL Demo :...

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure

WordPress Plugin RB Agency 2.4.7 - Local File Disclosure Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is...

WordPress RB Agency 2.4.7 File Disclosure

Exploit Title : WordPress RB Agency 2.4.7 Plugin - Local File Disclosure Exploit Author : Persian Hack Team Vendor Homepage : http://rbplugin.com/ Category Webapps Tested on Win Version : 2.4.7 Date 2016/09/03 PoC The Vulnerable page is /ext/forcedownload.php...

Zarafe CMS 1.0 Cross Site Scripting

Exploit Title : Zarafe CMS 1.0 / Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.zarrafeh.net/ Category: Webapps Tested on: Win Version: 1.0 Date: 2016/08/27 PoC: GET = /productview.php?productid=XSS GET = /articles.php?articleid=XSS Payload : 7b084"Only For...

Zarafe CMS 1.0 Cross Site Request Forgery

Exploit Title : Zarafe CMS 1.0 / CSRF Rest Admin Password Exploit Author : Persian Hack Team Vendor Homepage : http://www.zarrafeh.net/ Category: Webapps Tested on: Win Version: 1.0 Date: 2016/08/27 PoC: Exploit codes: ================ Rest Admin Password The Code for zarafe.html is Zarafe CMS CS...

WordPress Lazy Content Slider 3.4 Cross Site Request Forgery

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...