LaraChurch 1.0 Shell Upload

Exploit Title: LaraChurch - Complete Church Management System - Remote Shell Upload Date: 2018/24/06 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://creatydev.com Software Buy:...

Tripbuddy Travel, Locations, And Events 1.0 Cross Site Scripting

Exploit Title: Tripbuddy - Travel, Locations and Events Web App - xss Google Dork: N/A Date: 2017/28/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://tripbuddy-app.com/ Software Buy:...

Locations Multipurpose CMS Directory Theme 1.0 Cross Site Scripting

Exploit Title: Locations - Multipurpose CMS Directory Theme - xss Google Dork: N/A Date: 2017/27/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://themerig.com Software Buy:...

Sendroid < 6.5.0 - SQL Injection

Exploit Title: Sendroid - Bulk SMS Portal, Marketing Script 5.0.0 - 6.5.0 - SQL Injection Google Dork: "welcome to SMS portal" Date: 22/12/2017 Exploit Author: Onwuka Gideon Contact: http://twitter.com/@gideononwuka Vendor Homepage: http://ynetinteractive.com/ Software Buy:...

Joomla JooDatabase 3.1.0 SQL Injection

Exploit Title: Joomla! Component JooDatabase v3.1.0 - SQL Injection Google Dork: inurl:index.php?option=comjoodb Date: 24.02.2017 Vendor Homepage: https://feenders.de/ Software Buy: https://extensions.joomla.org/extensions/extension/core-enhancements/coding-a-scripts-integration/joodatabase/ Demo...

Joomla! Component GPS Tools 4.0.1 - SQL Injection

Joomla! Component GPS Tools 4.0.1 - SQL Injection Exploit Title: Joomla! Component GPS Tools v4.0.1 - SQL Injection Google Dork: inurl:index.php?option=comgpstools Date: 24.02.2017 Vendor Homepage: http://corejoomla.com/ Software Buy:...

Joomla EShop 2.5.1 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comeshop Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy:...

Joomla! Component EShop 2.5.1 - 'id' SQL Injection

Exploit Title: Joomla! Component EShop v2.5.1 - SQL Injection Google Dork: inurl:index.php?option=comeshop Date: 18.02.2017 Vendor Homepage: https://www.joomdonation.com/ Software Buy: https://www.joomdonation.com/joomla-extensions/eshop-joomla-shopping-cart.html Demo:...

Joomla Spider FAQ Lite 1.3.1 SQL Injection

Exploit Title: Joomla! Component Spider FAQ Lite v1.3.1 - SQL Injection Google Dork: inurl:index.php?option=comspiderfaq Date: 16.02.2017 Vendor Homepage: http://web-dorado.com/ Software Buy: https://extensions.joomla.org/extensions/extension/directory-a-documentation/faq/spider-faq-lite/ Demo:...

Joomla JE Tour 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Tour 2.0 - SQL Injection Google Dork: inurl:index.php?option=comjetour Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla JE Auction 1.6 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Classify Ads 1.2 - pro_id SQL Injection

Joomla! Component JE Classify Ads 1.2 - proid SQL Injection Exploit Title: Joomla! Component JE Classify Ads 1.2 - SQL Injection Google Dork: inurl:index.php?option=comjeclassifyads Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Auto 1.5 - 'd_itemid' SQL Injection

Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/vertical-markets/vehicles/je-auto/ Demo:...

Joomla! Component JE Form Creator 1.8 - 'Itemid' SQL Injection

Exploit Title: Joomla! Component JE Form Creator v1.8 - SQL Injection Google Dork: inurl:index.php?option=comjeformcr Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/contacts-and-feedback/forms/je-form-creator/ Dem...

Joomla! Component JE auction 1.6 - 'eid' SQL Injection

Exploit Title: Joomla! Component JE auction 1.6 - SQL Injection Google Dork: inurl:index.php?option=comjeauction Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/e-commerce/auction/je-auction/ Demo:...

Joomla! Component JE Property Finder 1.6.3 - SQL Injection

Joomla! Component JE Property Finder 1.6.3 - SQL Injection Exploit Title: Joomla! Component JE Property Finder 1.6.3 - SQL Injection Google Dork: inurl:index.php?option=comjepropertyfinder Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Auto 1.5 - d_itemid SQL Injection

Joomla! Component JE Auto 1.5 - ditemid SQL Injection Exploit Title: Joomla! Component JE Auto 1.5 - SQL Injection Google Dork: inurl:index.php?option=comjeauto Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Viavi Product Review SQL Injection

Exploit Title: Viavi Product Review - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/product-review/12406163 Demo: http://viavilab.com/codecanyon/productreviewdemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

Viavi Real Estate - SQL Injection

Exploit Title: Viavi Real Estate - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://viavilab.com/ Software Buy: https://codecanyon.net/item/viavi-real-estate/11217313 Demo: http://viavilab.com/codecanyon/realestatedemo/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Explo...

Domains Hostings Manager PRO 3.0 - entries SQL Injection

Domains Hostings Manager PRO 3.0 - entries SQL Injection Exploit Title: Domains & Hostings Manager PRO v 3.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://endavi.com/ Software Buy: https://codecanyon.net/item/advanced-domains-and-hostings-pro-v3-multiuser/10368735 Demo...