Multiple Cross-Site Request Forgery Vulnerabilities in Simple Invoices

Simple Invoices is an open source, free web-based invoicing system. Three cross-site request forgery vulnerabilities exist in Simple Invoices version 2013.1.beta.8. A remote attacker can use these vulnerabilities to create a new administrator user account and take control of the entire applicatio...

Collabo - Arbitrary File Download

Exploit Title: Collabo - TeamBusiness Collaboration Network - Arbitrary File Download Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://321-internet.com/ Software Buy: https://codecanyon.net/item/collabo-teambusiness-collaboration-network/15242543 Demo:...

Gram Post 1.0 - SQL Injection

Exploit Title: Gram Post - Instagram Auto Post Multi Accounts with Paypal integration v1.0 - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://vtcreators.com/ Software Buy:...

CubeCart 6.0.10 - Multiple Vulnerabilities

Exploit for php platform in category web applications Product: CubeCart Vendor: CubeCart Limited Vulnerable Versions: 6.0.10 and probably prior Tested Version: 6.0.10 Advisory Publication: March 2, 2016 without technical details Vendor Notification: March 2, 2016 Vendor Patch: March 16, 2016 Publ...

PHP-Nuke SPChat SQL Injection

Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln : http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=SQL...

PHP-Nuke module (SPChat) - SQL Injection

Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln : http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=SQL...

Novell Zenworks authorization bypass

Remote diagnostics functions are available to regular user...

Security hole in MatrikzGB

Security hole in MatrikzGB Guestbook 15/8/2003 Vulnerable Versions: Version 2.0 and prior Version 3 not tested Summary: MatrikzGB was written by Thomas Hempel for www.onsite.org. A bug in index.php allows a user with a regular user account to give administrator rights to himself. Details: The bug...