The Mole - Another Automatic SQL Injection exploitation tool

The Mole - Another Automatic SQL Injection exploitation tool The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based...

Ajax Script Cross Site Scripting / SQL Injection

Exploit Title: Ajax Script SQL Injection and XSS Vulnerability Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr ISSUE SQL Injection and XSS can be done using the POST method. Tamper data is available. Vulnerable Page:...

Uniscan 4.0 vulnerability scanner Released

Uniscan 4.0 vulnerability scanner Released The Uniscan vulnerability scanner is aimed at information security, which aims at finding vulnerabilities in Web systems and is licensed under the GNU GENERAL PUBLIC LICENSE 3.0 GPL 3. The Uniscan was developed using the Perl programming language to be...

Pacer Edition CMS 2.1 Cross Site Scripting

addslashes$POST'email'."'"; $results = $database-query$query; ---------------------------------------------------------------- Tested on: Microsoft Windows XP Professional SP3 EN Apache 2.2.14 Win32 PHP 5.3.1 MySQL 5.1.41 Vulnerability di...

Noah's Classifieds 5.0.4 - 'index.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/47578/info Noah's Classifieds is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing t...

Anfibia Reactor 2.1.1 (login.do) Remote XSS POST Injection Vulnerability

Summary Fast web-based server monitoring. Keep an eye on servers, connections, databases, cpu, hard drives and more! Description The Anfibia Reactor JS service suffers from a XSS vulnerability when parsing user input to the 'email' parameter via POST method in 'reactor/login.do' script at the...

Inventory Mojo Software Vulnerable to Multiple SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Inventory Mojo Software Vulnerable to Multiple SQL Injections Found by : p0pc0rn Dork : intext:"Powered by Inventory Mojo Software." SQL --- Vulnerable Parameters are Method = GET ------------ categoria.asp producto.asp srubro.asp...

MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== MODx Revolution CMS 2.0.4-pl2 Remote XSS POST Injection Vulnerability ===================================================================== getObject'modUser',array 30: 'use...

MODx Revolution CMS Cross Site Scripting

getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $c-innerJoin'modUserProfile','Profile'; 75: $c-wherearray 76: '...

MODx REvolution CMS 2.0.4-pl2 - POST injection Cross-Site Scripting

getObject'modUser',array 30: 'username' = $POST'username', 31: ; ... 71: else if !empty$POST'forgotlogin' 72: $c = $modx-newQuery'modUser'; 73: $c-selectarray'modUser.','Profile.email','Profile.fullname'; 74: $c-innerJoin'modUserProfile','Profile'; 75: $c-wherearray...

eBlog 1.7 SQL Injection

eBlog 1.7 Multiple SQL Injection Vulnerabilities Name eBlog Vendor https://emuci.com Versions Affected 1.7 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-11-10 X. INDEX I. ABOUT THE APPLICATION II. DESCRIPTION III...

HP Data Protector Media Operations 6.11 Denial Of Service

Exploit Title: HP Data Protector Media Operations 6.11 HTTP Server Remote Integer Overflow DoS Date: date: 17/09/10 Author: d0lc3 @rmallof http://elotrolad0.blogspot.com/ Software Link: http://www.hp.com Version: 6.11 Tested on: Windows XP SP3 Spa Sumary: """ HP Data Protector Media Operations ha...

HP Data Protector Media Operations 6.11 HTTP Server Integer Overflow

Exploit for windows platform in category dos / poc ==================================================================== HP Data Protector Media Operations 6.11 HTTP Server Integer Overflow ==================================================================== Exploit Title: HP Data Protector Media...

Personal.Net Portal - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Personal.Net Portal Multiple Vulnerabilities Affected Version : Personal.Net Portal Version 2.8.1 Discovery : www.Abysssec.com Vendor...

osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability

Exploit for php platform in category web applications ===================================================== osCSS 1.2.1 Changer Login and Pass CSRF Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

iOS Impact PDF Reader 2.0 - POST Method Remote Denial of Service

Exploit: Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/impact-pdf-reader/id322140783?mt=8 Version: 2.0, 1.2 Tested on: iPod 2G with iOS...

IPB 3.0.1 SQL Injection

Attention!\n"; echo "\n"; echo "Error!\n"; echo "This exploit is meant to be used as php CLI script!\n"; echo "More information:\n"; echo "http://www.google.com/search?hl=en&q=php+cl...

PacketFence Network Access Controller - Cross-Site Scripting

Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network access control NAC system...

PacketFence Network Access Controller XSS vulnerability

Exploit for unknown platform in category web applications ======================================================= PacketFence Network Access Controller XSS vulnerability ======================================================= Title : Injection Flaw in PacketFence Network Access Controller Date :...

PacketFence Network Access Controller XSS vulnerability

No description provided by source. Title : Injection Flaw in PacketFence Network Access Controller Date : 20-12-2009 Author : K053 Tested on : Private Networks Download : http://www.packetfence.org/download/releases.html Note : ------ PacketFence is a fully supported, Free and Open Source network...