Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery

Trend Micro Interscan Messaging Security Suite - Persistent Cross-Site Scripting Cross-Site Request Forgery Exploit Title: Trend Micro InterScan Messaging Security Suite Stored XSS and CSRF Date: 13/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.trendmicro.com...

BitraNet SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title = BitraNet - SQL Injection Vulnerability Google Dork = "Powered by : BitraNet" Exploit Author = Zikou-16 My Facebook = http://www.facebook.com/ZIkOou.16 Software Link = http://www.bitranet.com/ Exploit =...

SiteGo - Remote File Inclusion

SiteGo - Remote File Inclusion Exploit Title: SiteGo Remote File Inclusion Vulnerability Date: 10/09/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link: http://site-go.com/free/site-go.zip Tested on:...

doodleIT - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title = doodleIT - SQL Injection Vulnerability Google Dork = "Website Design doodleIT" Or intext:Website Design doodleIT Exploit Author = Zikou-16 My Facebook = http://www.facebook.com/ZIkOou.16 Software Link = http://www.doodleit.co.u...

Essential Website Design CMS SQL Injection

Exploit Title : essentialwebsitedesign Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.essentialwebsitedesign.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork :...

Syracus CMS SQL Injection

Exploit Title : Syracuse Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.lerentech.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Syracuse Web Design...

Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability

a bug in Wordpress chenpress Plugin that allows to us to occur a File Upload on a Remote machin. Exploit Title : Wordpress chenpress Plugin Arbitrary File Upload Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://wordpress.org Security Risk :...

Douran Portal 3.9.8.25 SQL Injection

The last version of this portal which used by own company, have SQL Injection bug: http://www.douran.com/homepage.aspx?site=DouranPortal&tabid=1SQLi&lang=fa-IR Ver: DOURAN Portal V3.9.8.25 Exploit Title: Douran Portal SQLi Vulnerability Date: 08/31/2012 Author: Persia Security Group - Prince &...

Net Ways CMS SQL Injection

?? Exploit Title : Net Ways Cms Sql Injection Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.netways.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Designed & develop...

Wordpress HD Webplayer 1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications | | | | \ | | | \ /\ | | | | | | | | | | | | / \ | |/ / | ' \ | | | . | | | | / / /\ \ | | / | | | | | | | | || |\ | | | | | \ \ / \ |||,|| || || ||| | || || \// \ - JoinSe7en...

Infinite IT Solutions CMS Cross Site Scripting

? Exploit Title : Infinite IT Solutions Cms Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.infiniteitsolutions.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Do...

VamCart 0.9 - Cross-Site Request Forgery

Exploit Title: VamCart v0.9 CSRF Vulnerability Date: 20/08/2012 Author: DaOne Software Link: http://vamcart.googlecode.com/files/vamcart.zip Greetings to: LCA CSRF Add Admin:...

ProQuiz v2.0.2 CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: ProQuiz v2.0.2 CSRF Vulnerability Author: DaOne Date: 19/8/2012 Software Link: http://code.google.com/p/proquiz/downloads/list CSRF Change Admin Password 0day.today 2018-02-17...

ProQuiz 2.0.2 - Multiple Vulnerabilities

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...

AraDown Blind SQL Injection Vulnerability

Exploit for php platform in category web applications "; $target = stdin; $ar = array'1','2','3','4','5','6','7','8','9','0','a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z'; echo " Username : "; for$i=1;$i=3...

Islamnt <= Remote Blind SQL Injection Exploit

Exploit for php platform in category web applications Query"select $val from styles where idstyle='$styledefault'"; FetchO$seltemp; $this-temp = $rowtemp-$val; $this-temp = stripslashes$this-temp; / print "\n+------------------------------------------------------------+"; print "\n| Islamnt =...

ptunnel 0.72 - Remote Denial of Service

ptunnel 0.72 - Remote Denial of Service !/usr/bin/env python =============================================================================== Exploit Title: ptunnel ' % sys.argv0 target remotehost = sys.argv1 ptunnel.h typedef struct uint32t magic, // magic number, used to identify ptunnel packets...

ptunnel 0.72 - Remote Denial of Service

!/usr/bin/env python =============================================================================== Exploit Title: ptunnel ' % sys.argv0 target remotehost = sys.argv1 ptunnel.h typedef struct uint32t magic, // magic number, used to identify ptunnel packets. dstip, // destination IP and port used...

WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload

Exploit for php platform in category web applications Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link:...

WordPress Resume Submissions / Job Postings 2.5.1 Shell Upload

Exploit Title: WordPress Resume Submissions & Job Postings v2.5.1 Unrestricted File Upload Date: 7/9/12 Exploit Author: Chris Kellum Vendor Homepage: http://www.geerservices.com/ Software Link: http://downloads.wordpress.org/plugin/resume-submissions-job-postings.2.5.1.zip Version: 2.5.1...