Address Book Script 1.09 - Local File Inclusion

No description provided by source. Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/addressbook.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Short URL 1.01 - Local File Inclusion

No description provided by source. Securitylab.ir Application Info: Name: Short URL Version: 1.01 Vendor: http://www.phpkobo.com/shorturl.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Parallels System Automation (PSA) Local File Inclusion Vulnerability

No description provided by source. Application Info: Name: Parallels System Automation PSA Vendor: http://Parallels.com Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Pargoon CMS all version - DoS Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Pargoon Vendor: http://www.vestasoft.ir Vulnerability Info: Type: DOS Risk: Medium 2010-01-17 - Found Vulnerability 2010-01-19 - Vendor notified 2010-05-08 - Public disclosure Vulnerability:...

Zomorrod Cms SQL Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Zomorrod Cms Vendor: http://www.zomorrod.net Vulnerability: http://site.ir/topic.php?SITEitem=54'+and+convertint,@@version='54 Discoverd By: Pouya Daneshmand Website: http://securitylab.ir Contacts: infoatsecuritylab.ir &...

Pars Design CMS Arbitrary File Upload

No description provided by source. Securitylab.ir Application Info: Name: Pars Design Vendor: http://Parsdata.com Vulnerability Info: Type: Remote Arbitrary File Upload Risk: High Vulnerability: http://site.ir/editorv2/editor/filemanager/upload/test.html Uploaded Here:...

HB CMS 1.7 - SQL Injection

No description provided by source. Securitylab.ir Application Info: Name: HB cms Version: 1.7 Website: http://www.hbcms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium Dork...

DMXReady Registration Manager 1.1 - Arbitrary File Upload Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type:...

Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download...

EEGshop 1.2 - SQL Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: EEGshop Version: 1.2 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: info@securitylabdotir , [email protected] ===========================================================...

Saman Portal SQL Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Saman Portal Vendor: http://www.sis-eg.com Vulnerability: http://site.com/index.php?module=subjects&func=viewpage&pageid=-1+union+select+1,2,3,null,concatws0x3a,version,database,user,6,7,8,9,10,11,12,null,14,15,16,17--...

Jieqi CMS <= 1.5 - Remote Code Execution Exploit

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Jieqi cms = 1.5 remote code execution exploit by Securitylab.ir mail: [email protected] +---------------------------------------------------------------------------+ '; ...

RaakCMS Multiple Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: RaakCms Vendor: http://raakcms.com Vulnerability: ======================= Arbitrary File Upload ======================= http://server/webmaster/pic.aspx select file and folder , your file upload here:...

TCPDB 3.8 - Remote Content Change Bypass Vulnerabilities

No description provided by source. Securitylab.ir Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/ Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Contents Change...

PSArt 1.2 - SQL Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: PSArt Version: 1.2 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

Xxasp 3.3.2 - SQL Injection

Securitylab.ir Application Info: Name: Xxasp Version: 3.3.2 Discoverd By: [email protected] Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir ===========================================================...

elkagroup Image Gallery 1.0 - Arbitrary File Upload Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: elkagroup Image Gallery Dork: elkagroup - Image Gallery v1.0 - All right reserved Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type:...

DedeCMS 5.1 - SQL Injection

No description provided by source. Securitylab.ir Application Info: Name: DEDECMS Version: 5.1 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium...

Unfixed XSS vulnerability at www.cybertech-ir.com

Security researcher Securitylab.ir, has submitted on 01/01/2012 a cross-site-scripting XSS vulnerability affecting www.cybertech-ir.com, which at the time of submission ranked 256814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. I...

Unfixed XSS vulnerability at s1.asmandez.ir

Security researcher Securitylab.ir, has submitted on 18/02/2011 a cross-site-scripting XSS vulnerability affecting s1.asmandez.ir, which at the time of submission ranked 66436 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...