WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download

WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software:...

BistroStays 3.0 - guests SQL Injection

BistroStays 3.0 - guests SQL Injection Exploit Title: BistroStays - Vacation Rental Software v3.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/bistrostays Demo: http://demo.ncryptedprojects.com/bistrostaysv3/...

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo...

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from SQL Injection vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

Media Search Engine SQL Injection

Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...

Soundify 1.1 - tid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Soundify - Audio Sharing Software v1.1 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/soundify Demo: http://demo.ncryptedprojects.com/soundify/...

BistroStays 3.0 - 'guests' SQL Injection

Exploit Title: BistroStays - Vacation Rental Software v3.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/bistrostays Demo: http://demo.ncryptedprojects.com/bistrostaysv3/ Version: 3.0 Tested on: Win7 x64, Kali Linux...

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from SQL Injection vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

Fashmark 1.2 - category Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fashmark - eCommerce Script v1.2 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.ncrypted.net/ Software: https://www.ncrypted.net/fashmark Demo: http://demo.ncryptedprojects.com/fashmark-ent/...

Country on Sale Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Country on Sale Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/country-on-sale-script/prod53.html Demo:...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

Media Search Engine Script - search SQL Injection

Media Search Engine Script - search SQL Injection Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo:...

WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download

Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/Mac-Photo-Gallery Demo: http://www.apptha.com/demo/mac-photo-gallery Version: 3...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download

Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-galler...

Media Search Engine Script - 'search' SQL Injection

Exploit Title: Media Search Engine Script - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: http://www.websitescripts.org/ Software: http://www.websitescripts.org/website-scripts/media-search-engine-script/prod51.html Demo: http://www.websitescripts.org/demo/mediasearchengine/...

Envato Clone Script - SQL Injection

Envato Clone Script - SQL Injection Exploit Title: Envato Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://envatoclone.bsetec.com/ Demo: http://bsetecdemo.com/envatoclone/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit...

Videohive Clone Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Videohive Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://videohiveclone.bsetec.com/ Demo: http://www.bsetecdemo.com/videohiveclone/ Version: N/A Tested on: Wi...

Videohive Clone Script - SQL Injection

Exploit Title: Videohive Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://videohiveclone.bsetec.com/ Demo: http://www.bsetecdemo.com/videohiveclone/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan...

Videohive Clone Script - SQL Injection

Videohive Clone Script - SQL Injection Exploit Title: Videohive Clone Script - SQL Injection Google Dork: N/A Date: 08.03.2017 Vendor Homepage: http://bsetec.com/ Software : http://videohiveclone.bsetec.com/ Demo: http://www.bsetecdemo.com/videohiveclone/ Version: N/A Tested on: Win7 x64, Kali...