WordPress Plugin SendIt 1.5.9 - Blind SQL Injection

Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using $usercount for the boolean condition checking :...

Media In Spot CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications Name : Media In Spot LFI Vulnerability Date : May,16 2011 Vendor Url :http:http://www.mediainspot.com/ Dork:" "Powred By Media In Spot"" Author : wlhaan haker Exploit:...

Cook Media Web Development Group SQL Injection

+Exploit Title: Cook Media Web Development Group Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + Date : 27.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Cook Media Group, LLC." inurl:"php?script=" + Category : Web Apps SQli...

Kyung Studios WebDesigners Database Disclosure vulnerability

Exploit for php platform in category web applications +Exploit Title: Kyung Studios WebDesigners Database Disclosure vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : intext:"Site Design by Kyung Studios" + Category : Web Apps SQli Choose any site that comes up when you...

Originsoftech Web Portal SQL Injection

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ Title : Originsoftech Web Portal SQL Injection Vulnerability Author: eXeSoul Home : 1337day.com or www.indishell.in /www.andhrahackers.com Email : [email protected] date : 8/04/2011 d0rk:- designed by...

Web Wiz Forum - Injection

Web Wiz Forum - Injection Title : Web Wiz Forum Injection Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : [email protected] date : 23/3/2011 D0rk : i Powered by Web Wiz Forums category : Web Apps SQli Go To Site :- SQL injection Vulnerability...

TailoredWeb File [Shell] Upload Vulnerability

Exploit for php platform in category web applications Title : TailoredWeb FileShell Upload Vulnerability Author: eXeSoul Home : www.indishell.in or www.andhrahackers.com Email : email protected date : 19/3/2011 D0rk : Developed By TailoredWeb.com category : Web Apps php .-" "-. / \ | eXeSoul | |,...

Joomla Component com_adsmanager Remote File Inclusion Vulnerability

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://downloads.ziddu.com/downloadfiles/10982893/comadsmanager.zip .:. Dork : inurl:"comadsmanager" === Exploit ===...

Sulata iSoft Local File Disclosure

========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10 December 2010 Author : Suddendeath...

Joomla Clan SQL Injection

Joomla Component comclan Sql Injection Vulnerability ============================================================== http://joomlacode.org/gf/project/comclan/ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Dork : inurl:"comclan" === Bug === www.site.com/index.php?action=comclan&cid=185Sql Injection...

Joomla! Component com_clan - SQL Injection

Joomla Component comclan Sql Injection Vulnerability ============================================================== http://joomlacode.org/gf/project/comclan/ .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Dork : inurl:"comclan" === Bug === www.site.com/index.php?action=comclan&cid=185Sql Injection...

Jax Guestbook admin bypass vulnerability

Exploit for php platform in category web applications ======================================== Jax Guestbook admin bypass vulnerability ======================================== Exploit Title: Jax Guestbook admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software...

Joomla! Component com_yellowpages - SQL Injection

Joomla! Component comyellowpages - SQL Injection =============================================================== Joomla Component comyellowpages SQL Injection Vulnerability =============================================================== Exploit Title : Joomla "comyellowpages" Sql Injection...

Sky(skycn)procedure SQL injection vulnerability-vulnerability warning-the black bar safety net

Sky Download Station is domestic famous of download sites that offer at home and abroad the latest freeware, shareware download. Its in the country railcom, Unicom, Telecommunications, Information port, etc. are built with php+MySql set up the Download Station, a considerable part of the download...

PhotoPost PHP 4.0 - 4.6 SQL Injection

Exploit Title: PhotoPost PHP SQL Injection Vulnerability Date: 23/07/2010 Author: Cyber-sec Software Link: www.photopost.com Version: 4.0 - 4.6 Tested on: windows xp pack 3 CVE : N/A --------------------------exploit------------------------------ dork : Powered by: PhotoPost PHP 4.6 exploit:...

2DayBiz ybiz Freelance Script - SQL Injection

2DayBiz ybiz Freelance Script - SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/freelancescript.html +Discovered by Easy Laster 4004-security-project.com +Security Group...

2DayBiz Photo Sharing Script - SQL Injection (2)

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Info : http://www.2daybiz.com/photosharingscript.html +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and 4004-Security-Project...

Hampshire Trading Standards Script - SQL Injection

Hampshire Trading Standards Script - SQL Injection Title: Hampshire Trading Standards Script SQL Injection Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link:N/A Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : " inurl:tradeCategory.php?id= " Helllo Allz. Exploit :...

Powie's PSCRIPT Gastebuch 2.09 SQL Injection

----------------------------Information------------------------------------------------ +Name : Powie's PSCRIPT Gästebuch = 2.09 SQL Injection Vulnerability +Autor : Easy Laster +Date : 29.03.2010 +Script : Powie's PSCRIPT Gästebuch = 2.09 +Download : ----------------- +Demo :...

Joomla As SQL Injection

Title:Joomla comas Sql Injection Vulnerability Author: N2n-Hacker Date:2010-03-11 Script: --Joomla-- Joomla comas Sql Injection Vulnerability N2n-Hacker m9awda 3lya from Algeria mizirya o tahya ljazayer Searching:index.php?option=comas&as=100 exploiting:...