CloudShare 1.6 Shell Upload

======================================================================== | Title : CloudShare v1.6 Shell upload vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : v1.6 | Vendor :...

Wordpress Tevolution Plugin 2.3.1 Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Tevolution Plugin 2.3.1 Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/plugins/Tevolution/tmplconnector Vendor Homepage : https://templatic.com/ version : 2.3.1 Tested on:...

Joomla com_aicontactsafe Arbitrary File Upload / SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link :...

Bezaat Script V2 Arbitrary Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : Bezaat Script V2 Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork 1 : index of /SystemImagesads/ Dork 2 : Powed by Greenit Egypt for Information Technology Vendor Homepage :...

Simpla Admin Single-adsID SQL Injection / Shell Upload Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Simpla Admin Single-adsID SQL Injection / Shell Upload Exploit Author : xBADGIRL21 Dork : intext:connexion "single-ads.php?ID=" or inurl:.single-ads.php?ID= Software link :...

Wordpress plugin bordeaux theme upload shell vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An upload vulnerability exists in the WordPress plugin bordeaux theme, which can be exploited by an attacker ...

Bezaat Script 2 Shell Upload

Exploit Title : Bezaat Script V2 Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork 1 : index of /SystemImagesads/ Dork 2 : Powed by Greenit Egypt for Information Technology Vendor Homepage : http://greenitegypt.net/products.php?catid=1 Tested on: BACKBOX MyBlog :...

HelpDeskZ 1.0.2 unauthorized Shell upload

No description provided by source. ''' Exploit Title: HelpDeskZ /submitticketcontroller.php - Line 141 $filename = md5$FILES'attachment''name'.time.".".$ext; So by guessing the time the file was uploaded, we can get RCE. Steps to reproduce:...

HelpDeskZ 1.0.2 - Arbitrary File Upload

HelpDeskZ 1.0.2 - Arbitrary File Upload ''' Updated Exploit Provided by Drew Griess Exploit Title HelpDeskZ = v1.0.2 - Unauthenticated Shell Upload Google Dork intextHelp Desk Software by HelpDeskZ Date 2016-08-26 Exploit Author Lars Morgenroth - @krankoPwnz Vendor Homepage httpwww.helpdeskz.com...

HelpDeskz 1.0.2 Shell Upload

Exploit Title: HelpDeskZ /submitticketcontroller.php - Line 141 $filename = md5$FILES'attachment''name'.time.".".$ext; So by guessing the time the file was uploaded, we can get RCE. Steps to reproduce: http://localhost/helpdeskz/?v=submitticket&action=displayForm Enter anything in the mandatory...

HelpDeskZ 1.0.2 - Arbitrary File Upload

''' Updated Exploit Provided by Drew Griess Exploit Title HelpDeskZ = v1.0.2 - Unauthenticated Shell Upload Google Dork intextHelp Desk Software by HelpDeskZ Date 2016-08-26 Exploit Author Lars Morgenroth - @krankoPwnz Vendor Homepage httpwww.helpdeskz.com Software Link...

HelpDeskZ 1.0.2 - Unauthenticated Arbitrary File Upload

Exploit for php platform in category web applications ''' Exploit Title: HelpDeskZ /submitticketcontroller.php - Line 141 $filename = md5$FILES'attachment''name'.time.".".$ext; So by guessing the time the file was uploaded, we can get RCE. Steps to reproduce:...

WordPress Tevolution 2.3.1 Shell Upload

Exploit Title : Wordpress Tevolution Plugin 2.3.1 Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/plugins/Tevolution/tmplconnector Vendor Homepage : https://templatic.com/ version : 2.3.1 Tested on: BackBox skype:xbadgirl21 Date: 15/08/2016 video Proof :...

Joomla Weblinks Shell Upload

Exploit Title : Joomla comweblinks Shell Upload Vulnerability Exploit Author : howucan Website : http://howucan.gr Dork : allinurl:/index.php?option ename jformdescription asset=comweblinks Software link : http://extensions.joomla.org/extensions/extension/official-extensions/weblinks Tested on:...

Joomla AI Contact Safe 2.0.20 Shell Upload / SQL Injection

Exploit Title : Joomla comaicontactsafe Arbitrary File Upload / SQL injection Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comaicontactsafe Software link : http://www.algisinfo.com/en/download/category/1-free-extensions.html Vendor Homepage : http://www.algisinfo.com/...

Simpla Admin 1.02 Shell Upload / SQL Injection

Exploit Title : Simpla Admin Single-adsID SQL Injection / Shell Upload Exploit Author : xBADGIRL21 Dork : intext:connexion "single-ads.php?ID=" or inurl:.single-ads.php?ID= Software link : https://themeforest.net/item/simpla-admin-flexible-user-friendly-admin-skin/46073 Category: Webapps Tested o...

Joomla SmartFormer 2.4.1 Shell Upload Vulnerability

Detects the installed version of Joomla Smartformer. The script detects the version of Joomla Smartformer component on remote host and tells whether it is vulnerable or not. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Iranian Weblog Services 3.3 Cross Site Scripting / Shell Upload / SQL Injection

Document Title: =============== Iranian Weblog Services v3.3 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1862 CWE-89 CWE-79 CWE-264 http://cwe.mitre.org/data/definitions/89 http://cwe.mitre.org/data/definitions/79...

phpATM 1.32 - Arbitrary File Upload / Remote Command Execution (Windows Servers)

Exploit for php platform in category web applications ?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMP...

phpATM 1.32 (Windows) - Arbitrary File Upload Remote Command Execution

phpATM 1.32 Windows - Arbitrary File Upload Remote Command Execution ?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windo...