EasyWebTime V.2007 CMS SQL Injection

Exploit Title: EasyWebTime V.2007 CMS sql injection Google Dork: "Powered by EasyWebTime V.2007" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.bizpotential.com/main.php?filename=easywebtime Version: All Version Category:: webapps...

Sichkg CMS SQL Injection

Exploit Title: sichkg CMS SQL Injection Vulnerability Google Dork: "Powered by sichkg.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.sichkg.com Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Serv...

Globi CMS SQL Injection

Exploit Title: globi CMS SQL Injection Vulnerability Google Dork: "Powered by globi" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.globi.ca/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - wi...

Detna CMS SQL Injection

Exploit Title: Detna CMS sql injection Google Dork: "Powerd by Detna" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.detna.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - win7...

Jajitech IT Solutions CMS SQL Injection

Exploit Title: Jajitech IT Solutions CMS sql injection Google Dork: "Powered by Jajitech IT Solutions" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu...

TAGWORX.CMS SQL Injection

Exploit Title: TAGWORX.CMS CMS gallery.php sql injection Google Dork: "Powered by " Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server -...

Keralainfotech CMS SQL Injection

Exploit Title: Keralainfotech CMS sql injection Google Dork: "Powered by Keralainfotech.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://keralainfotech.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windo...

Mediachurch CMS SQL Injection

Exploit Title: mediachurch CMS sql injection Google Dork: " Powered by MediaChurch & Calvary Episcopal Church" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://mediachurch.com/ Version: All Version Category:: webapps Tested on: GNU/Linux...

CT Web Design SQL Injection

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 1 0 0 1 www.DataCoderS.Org 1 010101010101010101010101010101010101010101010101010101010 ++ Exploit Title : CT Web Design Sql Injection Vulnerability Author : Iranian Datacoders Security Team Site : Htt...

PBW CMS SQL Injection

---------------IN THE NAME OF ALLAH----------------- Title: PBW CMS SQL Injection Vulnerability Discovered By : Ashiyane Digital Security Team Author : Ashiyane Digital Security Team Dork : intext:Powered by Point B Web CMS inurl:eventdetail.php?eventid= Exploit :...

WebActive CMS Cross Site Scripting

Exploit Title: WebActive CMS Cross site Scripting Vulnerability Google Dork: Intext:"powered by: WebActive" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.webactive.nl/ Tested on: all ================================== + zoeken parametr...

Cutenews 1.5 Cross Site Scripting

Exploit Title: Cutenews 1.5 Cross site Scripting Vulnerability Google Dork: Intext:"Content Management Powered by CuteNews" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Site : Http://AjaxTm.com/ Vendor Home OR download link: http://cutephp.com/click.php?cutenewslatest Tested on: all...

ExtCalendar 2 SQL Injection / Cross Site Scripting

---------------IN THE NAME OF ALLAH----------------- Title: ExtCalendar 2 Multipe Vulnerabilities Discovered By : Ashiyane Digital Security Team Author : Ashiyane Digital Security Team Dork : intext:Powered by ExtCalendar 2 Exploit : localhost/calendar.php?mode=view&id=SQL...

SA-CONTRIB-2012-137 - Heartbeat - Cross Site Request Forgery (CSRF) in heartbeat_comments

This module enables you to display activity for events on a site. The sub-modules heartbeatcomments and shouts don't sufficiently check the heartbeat comment post values making it possible for an attacker to cause a user to unknowingly make comments. CVE: Requested Versions affected...

PhpFox 3.0.1 Cross Site Scripting

Exploit Title: phpFox Version 3.0.1 Cross site Scripting Vulnerability Google Dork: Intext:"Powered By phpFox Version 3.0.1" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.phpfox.com/ Tested on: all ================================== +...

Cm3 CMS Cross Site Scripting

Exploit Title: cm3 cms Cross site Scripting Vulnerability Google Dork: Intext:"Powered by cm3" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.cm3cms.com Tested on: all ================================== + keywords $ strSearchPhrase...

Kingcow CMS Cross Site Scripting

Exploit Title: kingcow CMS Cross site Scripting Vulnerability Google Dork: Intext:"Powered by Central" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://kingcow.com/ Tested on: all ================================== + for parametr in search.ph...

Plante Graffix SQL Injection

---------------------------------------------------------------- Plante Graffix SQL Injection ---------------------------------------------------------------- Exploit Title: Plante Graffix SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Site : http://net-w0lf.blogspot.com...

apache struts2 remote code execute

this method was published at xcon2012 xcon.xfocus.net. kxlzx http://www.inbreak.net flow this and step by step: 1, down load struts2-showcase from struts.apache.org 2, run struts2-showcase. 3, open url: http://localhost:8080/struts2-showcase/skill/edit.action?skillName=SPRING-DEV 4, write skill...

Pro-Logistics Group SQL Injection

---------------------------------------------------------------- Pro-Logistics Group SQL Injection ---------------------------------------------------------------- Exploit Title: Pro-Logistics Group SQL Injection Author: Hack Center Security Team Discovered By : Net.W0lf Software Link:...