PHP-X-Links Script - SQL Injection

Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by Php-X-Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows...

ITMiddle SQL Injection

Exploit Title: itmiddle SQL Injection Vulnerabilitiy Google Dork: "Powered by itmiddle" Date: 31/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.itmiddle.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

PHPB2B Cross Site Scripting

Exploit Title: PHPB2B Cross Site Scripting Vulnerabilitiy Google Dork: "Powered by PHPB2B" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.phpb2b.com Version: All Version Category:: webapps Security Risk:: Low Tested on: GNU/Linu...

WordPress LivePHP Cross Site Scripting

Exploit Title: Wordpress wp-livephp plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link: http://wordpress.org/extend/plugins/wp-livephp/ Version: All Version...

Readmore Systems SQL Injection

Exploit Title: Readmore Systems Script SQL Injection Vulnerability Google Dork: Website Powered By ReadMore Systems Date: 16/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://readmoresystems.com Version: All Version Security Risk::High...

wsCMS Cross Site Scripting / SQL Injection

Exploit Title: wsCMS alert/farbodmahini/ www.wbnb-fanb.ca/search.php?search=alert/farbodmahini/ www.gowanbrae.ca/search.php?search=alert/farbodmahini/ Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- IrIsT-K0242-P0W3RFU7-Mr.M4st3r-HigherSense ,... GreetZ : All H4ckCity...

WebSAT Blind SQL Injection

Exploit Title: WebSAT Blind SQL Injection Vulnerabilitiy Google Dork: "powered by WebSAT™" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.off-ice.com.au Version: All Version Category:: webapps Security Risk:: High Tested on:...

jPORTAL 2 SQL Injection

Exploit Title: jPORTAL 2 SQL Injection Vulnerabilitiy Google Dork: "powered by jPORTAL 2" Date: 8/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://jportal2.com/ Version: All Version Security Risk::High Tested on: GNU/Linux Ubuntu -...

EducationSansar SQL Injection

Exploit Title: EducationSansar SQL Injection Vulnerability Google Dork: Powered by: EducationSansar.com Date: 30/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://www.educationsansar.com Version: All Version Security Risk::High Tested...

WordPress Facebook Page Promoter Lightbox Cross Site Scripting

Exploit Title: Wordpress facebook-page-promoter-lightbox plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link:...

Rapidleech Cross Site Scripting

Exploit Title: Rapidleech alert/farbodmahini/ and click on Transload files. Demo: http://www.gigaleecher.com/audl.php http://aeon.zonyx.tv/audl.php Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- nitrojen90-K0242-kingcope-Mr.M4st3r , ... GreetZ : All H4ckCity Member - BH...

Neturf Cross Site Scripting

Exploit Title: Neturf Cross Site Scripting Vulnerabilitiy Google Dork: Web Application Powered by: Neturf Date: 27/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://www.neturf.com/ Version: All Version Security Risk:: Low Tested on:...

Tiki Wiki CMS Groupware Stored Cross-Site-Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

WordPress Plugin Mailing List - Arbitrary File Download

Exploit Title: Mailing List plugin for Wordpress Arbitrary file download Version: 1.4.2 Date: 2011-12-19 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/mailz/ Official fix: This advisory is released after the vendor http://www.zingiri.com was...

Tiki Wiki CMS Groupware 8.1 / 6.4 LTS Cross Site Scripting

Advisory: Tiki Wiki CMS Groupware Stored Cross-Site-Scripting Advisory ID: INFOSERVE-ADV2011-07 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Tiki 8.1 & 6.4 LTS affects all current releases Vendor URL: http://info.tiki.org/ Vendor Status: fixed...

Wordpress the-welcomizer plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress the-welcomizer plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Iran Hack Security Team & Islamic Republic Of Iran Security Team http://IranHack.Org & http://irist.ir/forum/ Wordpress the-welcomizer plugin Cross-Site Scripting Vulnerabilities...

Seotoaster 1.9 SQL Injection

Advisory: Seotoaster SQL-Injection Admin Login Bypass Advisory ID: INFOSERVE-ADV2011-06 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ==========================...

Readmore Systems Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Readmore Systems Script SQL Injection Vulnerability Google Dork: Website Powered By ReadMore Systems Date: 16/12/2011 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link:...

SA-CONTRIB-2011-059 - Meta tags quick - Cross Site Scripting (XSS)

The Meta tags quick module provides a simple tool to add meta tags to a site. The module doesn't consistently filter user input which could lead to a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "administer...

SuSE 10 Security Update : Mozilla XULrunner (ZYPP Patch Number 7492)

Mozilla XULRunner 1.9.1 was updated to the 1.9.1.19 security release. - Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, a...