Joomla Community Cross Site Scripting

================================================= Joomla comcommunity Persistent Xss Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

myUPB <= v2.2.6 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================== myUPB = v2.2.6 Multiple Vulnerabilities ======================================== Name: myUPB = v2.2.6 Multiple Vulnerabilities Download: http://sourceforge.net/projects/textmb/files/UPB/ Vulnerability:...

Joomla! Component com_community - Persistent Cross-Site Scripting

Joomla! Component comcommunity - Persistent Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comcommunity Persistent Xss Vulnerability Date : june, 21 2010 Critical Level : HIGH Vendo...

PHPAuctionSystem PHP Code Execution

====================================================== PHPAuctionSystem Upload Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

ClassMate Script Remote file Upload Vulnerability

Exploit for php platform in category web applications ================================================= ClassMate Script Remote file Upload Vulnerability ================================================= Title : ClassMate Script Remote file Upload Vulnerability Author : Mr.Benladen Homepage? :...

Joomla! Component com_annonces - Arbitrary File Upload

Joomla! Component comannonces - Arbitrary File Upload Title:Joomla Component comannonces Upload Vulnerability Author: Sid3^effects Published: 2010-06-06 email:[email protected] vendor url : http://joomla.clubnautiquemarine.fr/ google dork : inurl:comannonces ooooo .oooooo. oooooo oooooo oooo 888...

Persian E107 Cross Site Scripting

======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iqs3cur1ty.com/vb | Script...

Persian E107 - Cross-Site Scripting

Persian E107 - Cross-Site Scripting ======================================================================================== | Title : Persian E107 XSS Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...

SIP Username Enumerator (TCP)

Scan for numeric username/extensions using OPTIONS/REGISTER requests This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SIP Username Enumerator TCP', 'Description' = 'Scan for numeric...

CVE-2010-1999

Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1948

Directory traversal vulnerability in scr/soustab.php in openMairie Openfoncier 2.00, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter, a related issue to CVE-2007-2069...

CVE-2010-1947

Directory traversal vulnerability in scr/soustab.php in openMairie Openregistrecil 1.02, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsnphptype parameter. NOTE: this may be related to CVE-2007-2069...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in openMairie openCourrier 2.02 and 2.03 beta, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathom parameter to 1 bible.class.php, 2 dossier.class.php, 3 service.class.php, 4...

Burning Board Lite 1.0.2 Shell Upload

======================================================================================== | Title : Burning Board Lite 1.0.2 Upload Shell Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Script : Powered by Burning Board Lite 1.0.2 | Tested on: windo...

Joomla DJ Classifieds Shell Upload

Exploit Title:Upload Vulnerability in comdjclassifieds Version: Web Application vendor :http://dj-extensions.com/ Date: 2 apr,2010 Dork:inurl:comdjclassifieds Author:Sid3^effects Code : ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 8...

Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload

Joomla! Component comdjClassifieds 0.9.1 - Arbitrary File Upload Dork:inurl:comdjclassifieds ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8'...

Joomla DJ-Classifieds Extension com_djclassifieds Upload Vulnerability

Exploit for php platform in category web applications ====================================================================== Joomla DJ-Classifieds Extension comdjclassifieds Upload Vulnerability ====================================================================== Dork:inurl:comdjclassifieds...

Joomla! Component com_djClassifieds 0.9.1 - Arbitrary File Upload

Dork:inurl:comdjclassifieds ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888 888. .8888. .8' 888 888 888 .8'888. .8' 888 888 888.8' 888.8' 888 88b ooo 888' 888' o888o Y8bood8P' 8' 8' --------------------------------------------------------------------------------------...

Blippy Accidentally Gives Up Credit Card Numbers

Blippy users recently got a taste of the social media fad’s dark side when simple Google searches turned up 127 transactions that included credit card numbers of four users. Read the full article. The Register...

CVE-2009-4791

Multiple SQL injection vulnerabilities in Family Connections aka FCMS before 1.8.2 allow remote attackers to execute arbitrary SQL commands via the 1 letter parameter to addressbook.php, 2 id parameter to recipes.php, 3 year parameter to register.php, 4 pollid parameter to home.php, and 5 email...