Cype CMS - SQL Injection

Exploit Title: Cype Content Management System Remote SQL Injection Exploit Date: January 1st, 2010 Author: Sora Version: Revision 241 Tested on: Linux Backtrack 3 ----------------------------------------- Cype CMS Remote SQL Injection Exploit Author: Sora Contact: vhr95zw at hotmail dot com...

Jax Calendar 1.34 - Remote Admin Access

Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote Admin Access Exploit Author: Sora...

Jax Calendar 1.34 - Remote Admin Access

Jax Calendar 1.34 - Remote Admin Access Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34...

Jax Calendar 1.34 Remote Admin Access Exploit

No description provided by source. Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote...

Simple PHP Guestbook - Remote Admin Access

Simple PHP Guestbook - Remote Admin Access Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbo...

Jevonweb Guestbook Remote Admin Access Exploit

No description provided by source. Vendor: http://www.jevonweb.f2s.com/ Version: 1.0 Tested on: Windows and Linux --------------------------------------- Jevonweb Guestbook Remote Admin Access Exploit Author: Sora Contact: [email protected] Google Dork: "Jevonweb Guestbook"...

Simple PHP Guestbook - Remote Admin Access

Vendor: http://www.simplephpguestbook.com/ Version: 1.0 Tested on: Windows and Linux -------------------------------------- Simple PHP Guestbook Remote Admin Access Exploit Created by Sora + contact: vhr95zw at hotmail.com Description: Simple PHP Guestbook suffers an remote access in the guestboo...

Jax Guestbook 3.50 Admin Login Exploit

Exploit for unknown platform in category web applications ====================================== Jax Guestbook 3.50 Admin Login Exploit ====================================== Exploit Title: Jax Guestbook 3.50 Admin Login Exploit Date: December 23rd, 2009 Author: Sora Software Link:...

ImageVue 2.0 Remote Admin Login Exploit

Exploit for unknown platform in category web applications ======================================= ImageVue 2.0 Remote Admin Login Exploit ======================================= Author: Sora Software Link: http://www.imagevuex.com/ Version: 2.0 Tested on: Windows and Linux...

Jax Guestbook 3.50 - Admin Login

Exploit Title: Jax Guestbook 3.50 Admin Login Exploit Date: December 23rd, 2009 Author: Sora Software Link: http://script.wareseeker.com/ASP-NET/jax-guestbook-3.50.zip/32956d53cf Version: 3.50 Tested on: Windows and Linux ------------------------------------------- Jax Guestbook 3.50 Admin Login...

Aurora CMS Remote SQL Injection Exploit

No description provided by source. Exploit Title: Aurora CMS Remote SQL Injection Exploit content.php Date: December 22nd, 2009 Author: Sora Software Link: http://www.auroracms.com.au/ Version: 1.0, 2.0, and 3.0 Tested on: Windows and Linux ------------------------------------------------ Aurora...

Aurora CMS - SQL Injection

Exploit Title: Aurora CMS Remote SQL Injection Exploit content.php Date: December 22nd, 2009 Author: Sora Software Link: http://www.auroracms.com.au/ Version: 1.0, 2.0, and 3.0 Tested on: Windows and Linux ------------------------------------------------ Aurora CMS Remote SQL Injection Exploit...

Drumbeat CMS 1.0 SQL Injection

Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux ----------------------------------------- Drumbeat CMS SQL Injection Exploit + Discovered and notified by Sora A SQL injection exploit is found in Drumbeat CMS. The vulnerability exists in where there is an...

Unfixed XSS vulnerability at www.garena.com

Security researcher Sora, has submitted on 21/12/2009 a cross-site-scripting XSS vulnerability affecting www.garena.com, which at the time of submission ranked 7965 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

Drumbeat CMS SQL Injection Exploit

Exploit for unknown platform in category web applications ================================== Drumbeat CMS SQL Injection Exploit ================================== Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux -----------------------------------------...

Unfixed XSS vulnerability at jiggmin.com

Security researcher Sora, has submitted on 11/10/2009 a cross-site-scripting XSS vulnerability affecting jiggmin.com, which at the time of submission ranked 260513 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently...

Unfixed XSS vulnerability at dholcutzradio.com

Security researcher Sora, has submitted on 14/10/2009 a cross-site-scripting XSS vulnerability affecting dholcutzradio.com, which at the time of submission ranked 727081 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currentl...

Unfixed XSS vulnerability at www.factmonster.com

Security researcher Sora, has submitted on 10/11/2009 a cross-site-scripting XSS vulnerability affecting www.factmonster.com, which at the time of submission ranked 26715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is current...