Lucene search
+L

6 matches found

exploitpack
exploitpack
•added 2013/01/28 12:00 a.m.•6466 views

PHP weby directory software 1.2 - Multiple Vulnerabilities

PHP weby directory software 1.2 - Multiple Vulnerabilities =========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Power...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2013/01/25 12:00 a.m.•5746 views

PHP Weby Directory Software 1.2 SQL Injection / Cross Site Request Forgery

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

0.4AI score
SaveExploits0
zdt
zdt
•added 2010/12/29 12:00 a.m.•56 views

OpenClassifieds 1.7.0.3 Chained: Captcha Bypass / SQLi / Persistent XSS

Exploit for php platform in category web applications Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/02/26 11:30 p.m.•25 views

Sql injection

SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magicquotesgpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

6.8CVSS9.1AI score0.01255EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2009/02/26 11:00 p.m.•30 views

CVE-2008-6304

SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magicquotesgpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.4AI score0.01255EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/26 12:00 a.m.•5 views

CVE-2008-6304: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in xt:Commerce before 3.0.4 Sp2.1, when magicquotesgpc is enabled and the SEO URLs are activated, allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

6.8CVSS6.4AI score0.01255EPSS
SaveExploits0References2
Rows per page
Query Builder