707 matches found
Anfibia Remote Command Execution
Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...
Joomla Currency Converter Cross Site Scripting
Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...
VebTek CMS LFD Vulnerability
Exploit for php platform in category web applications Name: VebTek CMS LFD Vulnerability Google Dork: intext:"Hosted by VebTek" Type: PHP Date: 2012-01-27 Author: BHG Security Center Discovered by: Mr.XHat Home: Black-HG.org/cc/ Tested On: Linux Apache Demo:...
Unfixed XSS vulnerability at yahooaction.com
Security researcher BHG Security Center, has submitted on 19/01/2012 a cross-site-scripting XSS vulnerability affecting yahooaction.com, which at the time of submission ranked 510052 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. I...
Atar2b CMS 4.0.1 SQL Injection
Exploit Title: Atar2b Cms SQL Injection Vulnerability Date: 2012-01-06 GMT +7 Author: BHG Security Center Software Link: http://www.atar2b.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Atar2b ????? ?????? ?????" Version : 4.0.1 Tested on: ubuntu 11.04 CVE : - Finders: ...
DIGIT CMS 1.0.7 Cross Site Scripting / SQL Injection
Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT" Version : 1.0.7 Tested on: ubuntu 11.04 CVE : - Finders...
Priza Israel CMS 0.0.2 Cross Site Scripting / SQL Injection
Exploit Title: Priza Israel Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.priza.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Powered by Priza" Version : 0.0.2 Tested on: ubuntu 11.04 CVE : ...
Priza CMS Multiple Vulnerabilities
Exploit for asp platform in category web applications Exploit Title: Priza Israel Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.priza.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Powered by...
DIGIT CMS Multiple Vulnerabilities
Exploit for asp platform in category web applications Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT"...
Siena CMS 1.242 Cross Site Scripting
. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Siena CMS 1.242 alert0 Demo : http://www.sienacms.com/index.php?page="alert0 Demo :...
Grebweb CMS Cross Site Scripting / SQL Injection
. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Grebweb Cms alert0 PoC 2 Enter In Search Box XSS Code PoC : http://localhost/index.php Demo : http://www.yagyashree.com/index.php...
Vietsunit Script Local File Inclusion
---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not respond to the email as well as the phone. As there is not...
Tamweb CMS SQL Injection Vulnerability
Exploit for asp platform in category web applications Name: Tamweb CMS SQL Injection Vulnerability Type: ASP Category: Webapps Web Site: http://www.tamweb.ir/ Google Dork: inurl:.asp intext:"email protected" Date: 4-Nov-2011 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Windows Server 2003 II...
PHP Photo Album 0.4.1.16 Cross Site Scripting / Disclosure
---------------------------------------------------------------- PHP Photo Album Poc 2 http://localhost/phpAlbum/main.php?cmd=albumnew&keyword=XSS Demo :http://www.iloveazucar.com/phpAlbum/main.php?cmd=albumnew&keyword="onmouseover%3dprompt975554 bad%3d" Demo :http://www.dolfpretorius.com/main.ph...
AtraSoft CMS SQL Injection Vulnerability
Exploit for php platform in category web applications Neme: AtraSoft CMS SQL Injection Vulnerability Google Dork: inurl:product.php?id= intext:"Powered by AtraSoft" Version: 1.3.3 Category: Webapps Type: PHP Data: 2011/09/04 Author: Mr.XHat Discovered By: Mr.XHat Tested On: Linux Exploit:...
PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities
---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities Google Dork:...
PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities
Exploit for php platform in category web applications ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple...
Joomla Component (com_sgicatalog) <= SQL Injection Vulnerability
Exploit Title: Joomla Component comsgicatalog = SQL Injection Vulnerability Google Dork: inurl:index.php?option=comsgicatalog Date: 2011-10-12 Author: BHG Security Center Home: Http://black-hg.org Software Link: http://joomlaapps.com/ Version: 1.x Tested on: Windows XP- Persian CVE : Webapps...
Joomla Sgicatalog SQL Injection
Exploit Title: Joomla Component comsgicatalog = SQL Injection Vulnerability Google Dork: inurl:index.php?option=comsgicatalog Date: 2011-10-12 Author: BHG Security Center Home: Http://black-hg.org Software Link: http://joomlaapps.com/ Version: 1.x Tested on: Windows XP- Persian CVE : Webapps...
Joomla Component (com_expedition) <= SQL Injection Vulnerability
No description provided by source. Exploit Title: Joomla Component comexpedition = SQL Injection Vulnerability Author: BHG Security Center Date: 2011-10-09 Vendor: N/A E-mail: [email protected] | [email protected] Website: www.black-hg.org Google Dork: inurl:index.php?option=comexpedition...