CLscript Classified Script 3.0 - SQL Injection

Exploit Title: CLscript - Classified Script 3.0 / SQL Injection Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://www.phpkode.com/scripts/item/clscript-classified-script/ Tested on: Linux Dork:...

CLscript Classified Script 3.0 SQL Injection

Exploit Title: CLscript - Classified Script 3.0 / SQL Injection Date: 03/07/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://www.phpkode.com/scripts/item/clscript-classified-script/ Tested on: Linux Dork:...

Emesene Password Disclosure

Exploit for linux platform in category local exploits Exploit Title: Emesene Password Disclosure Category: Local Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Sofware web: http://blog.emesene.org/p/downloads.html Tested on: Linux Th...

Unfixed XSS vulnerability at www.tubeclipz.com

Security researcher RemoteExecution, has submitted on 05/02/2012 a cross-site-scripting XSS vulnerability affecting www.tubeclipz.com, which at the time of submission ranked 336412 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It ...

Joomla! Component com_ponygallery - SQL Injection

Exploit Title: joomla component componygallery SQL injection Vulnerability Download : http://www.adyawinsa.com/index.php/remository?func=fileinfo&id=2 Date: 11/04/2012 Author: xDarkSton3x E-mail : [email protected] Category: webapps Google dork: inurl:"componygallery" Exploit/p0c :...

Joomla Ponygallery SQL Injection

Exploit Title: joomla component componygallery SQL injection Vulnerability Download : http://www.adyawinsa.com/index.php/remository?func=fileinfo&id=2 Date: 11/04/2012 Author: xDarkSton3x E-mail : [email protected] Category: webapps Google dork: inurl:"componygallery" Exploit/p0c :...

Joomla Bearleague SQL Injection

Exploit Title: joomla component combearleague SQL injection Vulnerability Date: 10/04/2012 Author: xDarkSton3x E-mail : [email protected] Category:: webapps Google dork: inurl:combearleague Vendor: http://beardev.com/component/joobb/topic/220-BearLeagueforSnookerorindividualSports.html Tested o...

Joomla The Estate Agent SQL Injection

Exploit Title: joomla component comestateagent SQL injection Vulnerability Date: 10/04/2012 Author: xDarkSton3x E-mail : [email protected] Category:: webapps Google dork: inurl:"comestateagent" Tested on: linux + windows Vendor link: http://www.eaimproved.eu/index.php Exploit/p0c :...

Joomla! Component com_bearleague - SQL Injection

Joomla! Component combearleague - SQL Injection Exploit Title: joomla component combearleague SQL injection Vulnerability Date: 10/04/2012 Author: xDarkSton3x E-mail : [email protected] Category:: webapps Google dork: inurl:combearleague Vendor:...

Joomla! Component com_bearleague - SQL Injection

Exploit Title: joomla component combearleague SQL injection Vulnerability Date: 10/04/2012 Author: xDarkSton3x E-mail : [email protected] Category:: webapps Google dork: inurl:combearleague Vendor: http://beardev.com/component/joobb/topic/220-BearLeagueforSnookerorindividualSports.html Tested o...

Joomla component (com_lqm) SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: joomla component comlqm SQL injection Vulnerability Developer: Not Registered Date: 10/04/2012 Author: xDarkSton3x E-mail : email protected Category: webapps Google dork: inurl:"index.php?option=comlqm" Example Sites :...

Pyme-Web SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Pyme-Web SQL Injection Vulnerability Date: 04/04/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Pyme-Web http://www.pyme-web.com.ar/pw/index.php Test...

Encaps PHP Gallery SQL Injection

Exploit Title: Encaps PHP Gallery SQL Injection Date: 14/03/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Encaps PHP Gallery http://www.encaps.net/software/encapsgallery/ Tested on: Linux Dork:...

Pirelli Discus DSL-DRGA112-07 Denial Of Service

Exploit Title: Pirelli Discus DSL-DRGA112-07 Denial of Service Date: 19/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Hardware: Pirelli Discus DSL-DRGA112-07 Tested on: Linux Comment Greetz: Hernan Jais, Alfonso Cuevas, SPEE...

Zubrag.com File Upload Form Shell Upload

Exploit Title: File Upload Form File Arbitrary Upload Date: 05/02/2012 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: File Upload Form http://www.zubrag.com/scripts/file-upload-form.php Tested on: Linux Comment Greetz: Hern...

Joomla Component (com_bnf) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component combnf SQL Injection Vulnerability Google Dork: index.php?option=combnf Date: 22/12/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Tested on:...

Unfixed Script Insertion vulnerability at pastehtml.com

Security researcher RemoteExecution, has submitted on 23/01/2012 a Script Insertion vulnerability affecting pastehtml.com, which at the time of submission ranked 34012 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/01/2012. It is currently...

Unfixed XSS vulnerability at www.paginasclaro.com.ar

Security researcher RemoteExecution, has submitted on 13/09/2011 a cross-site-scripting XSS vulnerability affecting www.paginasclaro.com.ar, which at the time of submission ranked 729462 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/201...

TortoiseSVN Insecure Library Loading Vulnerability

TortoiseSVN is prone to insecure library loading vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unfixed XSS vulnerability at gestiondecuenta.com

Security researcher RemoteExecution, has submitted on 12/08/2008 a cross-site-scripting XSS vulnerability affecting gestiondecuenta.com, which at the time of submission ranked 101862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. I...