Article Dashboard SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Article Dashboard sql injection Date: 3-5-2012 Author: b0y h4ck3r Version: no more than this Category: webapps Google dork: inurl:ezineready.php?id= intext:Powered by Article Dashboard Tested on: windows7 Demo site:...

Google Fixes Five Bugs in Chrome 18

Google has fixed five security vulnerabilities in its Chrome browser, including three high-severity flaws. One of the less-severe vulnerabilities fixed in Chrome 18 is a race condition in the browser’s sandbox. This round of patches in Chrome is one of the rare occasions when the company didn’t...

SA-CONTRIB-2012-071 - Glossify - Cross Site Scripting (XSS) - Unsupported

CVE: CVE-2012-2309 This module generates internal node to node, node to taxonomy or node to external URL links crosslinks automatically - ideal for SEO of your site's pages and partner pages. This module does not protect against an Cross Site Scripting XSS attack. The vulnerability is mitigated b...

Winds Online SQL Injection

Exploit Title: Winds online test.asp SQL Injection Vulnerability + Author: Cair3x + Team : Ajax Security Team + D0rk : Powered by FLEX360 Exploit Vulnerability Page : test.asp http://target.com/patch/test.asp?Cid=SQL Demo : http://www.netech.org/test.asp?cid=9' Exploit BY : Cair3x...

Heycats CMS Cross Site Scripting

Exploit Title : heycats Cms Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://www.heycats.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu -...

SA-CONTRIB-2012-072 - cctags - Cross Site Scripting (XSS)

CVE: CVE-2012-2310 This module enables you to create "tag clouds" with taxonomy terms displayed in different sizes depending on how frequently they are used on a site. The module doesn't sufficiently filter user supplied text leading to a Cross Site Scripting XSS vulnerability. This vulnerability...

Mountain Internet CMS Cross Site Scripting

Exploit Title : mountaininternet Cms Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://mountaininternet.com Security Risk : High Version : All Version Tested on : GNU/Lin...

GENU CMS 2012.3 - Multiple SQL Injections

GENU CMS 2012.3 - Multiple SQL Injections Title: ====== GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities Date: ===== 2012-04-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=538 VL-ID: ===== 538 Introduction: ============= GENU is a Content Management System...

OpenX 2.8.6 File Upload

File upload vulnerability in OpenX ofcuploadimage.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

eFront 3.5.5 LFI

Local file include vulnerability in eFront langname parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

eFront 3.6.10 Authentication Bypass and File Upload

File upload vulnerability in eFront /libraries/filesystem.class.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

eFront 3.6.9 LFI

Local file include vulnerability in eFront js/scripts.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Exponent CMS 0.97 File Upload

File upload vulnerability in Exponent CMS uploadfileuploadcontrol.php Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Zen Cart 1.3.8a File Upload

File upload vulnerability in Zen Cart Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

WHMCS 4.2 File Disclosure

Local file disclosure vulnerability in WHMCS cart.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

SQLiteManager 1.2.0 LFI

Local file include vulnerability in SQLiteManager SQLiteManagercurrentTheme cookie Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

ViArt Shop LFI

Local file include vulnerability in ViArt Shop languagecode parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Novell ZENWorks Asset Management 7.5 File Upload

File upload vulnerability in Novell ZENWorks Asset Management Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 106413 High CVE-2011-3078: Use after free in floats handling. Credit to Google Chrome Security Team Marty Barbella and independent later discovery by miaubiz. 117627 Medium CVE-2011-3079: IPC validation failure. Credit to PinkiePie. 121726 Medium CVE-2011-3080: Rac...

WordPress WPsc-MijnPress Cross Site Scripting

Exploit Title : Wordpress WPsc-MijnPress plugin Cross-Site Scripting Vulnerabilities Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://wordpress.org/extend/plugins/wpsc-mijnpress/ Security Risk : High Versio...