LoveCMS 1.6.2 Cross Site Request Forgery

Exploit Title : LoveCMS 1.6.2 - CSRF Code Injection Vulnerability Script : LoveCMS 1.6.2 Language : PHP Download : http://sourceforge.net/project/showfiles.php?groupid=168535 Date : 2010/12/27 Dork : "Powered by LoveCMS" Found : by hiphop contact me :[email protected] source of...

Discovery TorrentTrader 2.6 Cross Site Scripting / SQL Injection / Local File Inclusion

Exploit Title: TorrentTrader 2.6 Multiple vulnerabilities Google Dork: "Powered by TorrentTrader v2.06" Date: 29 Décembre 2010 Author: EsS4ndre Software Link: http://sourceforge.net/projects/torrenttrader/files/TorrentTrader%20v2/TorrentTrader-v2.06/ Version: 2.6 Tested on: Linux...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...

Interact 2.4.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, email protected S.V.T :D 0day.today 2018-02-06...

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic...

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install'...

Interact 2.4.1 - SQL Injection

Interact 2.4.1 - SQL Injection Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

Interact 2.4.1 SQL Injection

Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

Interact 2.4.1 - SQL Injection

Title: Interact 2.4.1 SQL Injection Title : Interact 2.4.1 SQL Injection Affected Version : Interact l0rd D3lt4l0rD & Turb0 ,,,, [email protected] S.V.T :D...

LoveCMS 1.6.2 Local File Inclusion

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install' 14. 15. $include = $GET'install'; 16. 17...

LoveCMS 1.6.2 Final - Multiple Local File Inclusions

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install' 14. 15. $include = $GET'install'; 16. 17...

HttpBlitz Web Server Denial Of Service

!/usr/bin/python Title: HttpBlitz DOS Date: 12/24/2010 Author: otoy Software Link: http://sourceforge.net/projects/httpblitz/files/HttpBlitz.msi/download Tested on: Windows XP SP3 ====================================================================== / / / / / / / / / / / / / / / / / / / / / / /...

WiPhire : A Wireless Penetration Testing Tool !

If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...

MaticMarket 2.02 for PHP Nuke LFI Vulnerability

Exploit for php platform in category web applications MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

PHP-Nuke MaticMarket 2.02 - Local File Inclusion

PHP-Nuke MaticMarket 2.02 - Local File Inclusion MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

PHP-Nuke MaticMarket 2.02 - Local File Inclusion

MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

SnackAmp 3.1.3 SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.3 Malicious SMP Buffer Overflow Vulnerability SEH Date: 12/12/10 Author: james AT learnsecurityonline DOT com Software Link: http://snackamp.sourceforge.net/ Version: 3.1.3 Tested on: Windows XP SP3 EN CVE: N/A This version was just released as of 12/5/10 ! /usr/bin/en...

Abtp Portal Project 0.1.0 LFI Exploit

Exploit for php platform in category web applications ===================================== Abtp Portal Project 0.1.0 LFI Exploit ===================================== !/usr/bin/perl =about ---------------------------------------------------------------------------------------------------- Name :...

Abtp Portal Project 'ABTPV_BLOQUE_CENT' Parameter Local and Remote File Include Vulnerabilities

Abtp Portal Project is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to compromise the application and the underlying compute...

Abtp Portal Project 0.1.0 - Local File Inclusion

Abtp Portal Project 0.1.0 - Local File Inclusion !/usr/bin/perl =about ---------------------------------------------------------------------------------------------------- Name : Abtp Portal Project The variable $ ABTPVBLOQUECENTRAL was not correctly stated thus enabling the attack include...