Artiphp CMS 5.5.0 Database Backup Disclosure Exploit

Summary Artiphp is a content management system CMS open and free to create and manage your website. Description Artiphp stores database backups using backupDB utility with a predictable file name inside the web root, which can be exploited to disclose sensitive information by downloading the file...

AnvSoft Any Video Converter 4.3.6 Unicode Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title: AnvSoft Any Video Converter 4.3.6 unicode buffer overflow. Software Link: http://www.any-video-converter.com Version: 4.3.6 Tested on: Win XP SP3 French trigger the bug : generate the .reg file, execute it, and then open the a...

eLearning Server 4G Remote File Inclusion / SQL Injection

Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:"eLearning Server" Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft Windows news.php4 "nid" SQL...

Ushahidi 2.2 - Multiple Vulnerabilities

Exploit Title: Ushahidi 2.2 Multiple Vulnerabilites Date: 04/12/2012 Author: shpendk Software Link: http://download.ushahidi.com/ Version: 2.2 Tested on: Xampp on Windows Vendor Contact: 03/25/2012 - Contacted again: 03/28/2012 - No Response yet: 04/11/2012 - Full Disclosure: 04/12/2012 1 CSRF Ad...

Mini-stream RM-MP3 Converter v3.1.2.2 Local Buffer Overflow

Exploit for windows platform in category local exploits Exploit Title : Mini-stream RM-MP3 Converter V 3.1.2.2 Local Buffer OverFlow Author : SkY-NeT SySteMs Software Link : http://mini-stream.net/rm-to-mp3-converter/download/ Version : 3.1.2.2 Tested on : Xp Sp 2 Category : Local Code : Python...

Prathvi Systems - SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================================== Prathvi Systems - SQL Injection Vulnerability ========================================================================== Title: Prathvi Systems - SQL Injection...

CenterSite CMS Cross Site Scripting

Exploit Title : CenterSite Cms Cross-Site Scripting Vulnerabilitiy Author : BHG Security Center - IrIsT Security Team Discovered By : Am!r Home : http://Black-hg.Org - http://IrIsT.Ir Software Link : http://www.centersite.net/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubunt...

Xion Audio Player 1.0.127 - .aiff Denial of Service

Xion Audio Player 1.0.127 - .aiff Denial of Service !/usr/bin/python ------------------------------------------------------------------- Xion Audio Player 1.0.127 .aiff Denial of Service Vulnerability found by condis Download : http://xion.r2.com.au/index.php?page=download Tested on : Windows XP...

Charles River Web CMS Cross Site Scripting

Exploit Title : Charles-River-Web Cms Cross Site Scripting Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir & Http://Security7.ir Software Link : http://www.charlesriverweb.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server -...

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections

ArticleSetup - Multiple Persistence Cross-Site Scripting SQL Injections Title : ArticleSetup Multiple Persistence Cross-Site Scripting and SQL Injection Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.articlesetup.com/ Advisory :...

Firstload.com Cross Site Scripting

Exploit Title: Firstload.com usenet Provider Cross Site Scripting Google Dork: - Date: 30/3/2012 Author: Crim3R contact : [email protected] Tested on: ALL CVE : XSS Vulnerable searching for filenames is Vulnerable to Cross Site Scripting http://www.firstload.com/?uniq=1364f75a67db1bc2&log=47382&fn=...

HT Editor Spawning Root Shell

Exploit for linux platform in category remote exploits !/usr/bin/python Exploit Title: HT Editor Spawning Root Shell Date: 29-Mar-2012 Author: blusp10it Version: 2.0.18 Download: http://sourceforge.net/projects/hte/files/ht-source/ht-2.0.18.tar.gz Tested on: BackTrack 4 R2, Ubuntu 10.04 Run with:...

Family CMS 2.9 - Multiple Vulnerabilities

Family CMS 2.9 and earlier multiple Vulnerabilities =================================================================================== Exploit Title: Family CMS 2.9 and earlier multiple Vulnerabilities Download link...

Otuz8 Medya Cross Site Scripting

Exploit Title: Otuz8 Medya Script Cross Site Scripting Date: 25.03.2012 Author: V4rcyion GrayMAN Fýrat TEMEL Email: [email protected] Script url: http://toptanoje.com/ Version: N/A CVE : =======================Exploit==================================== ---GrayHatz Bug Researchers --- EXPL0...

phpMoneyBooks 1.0.2 Local File Inclusion

Exploit for php platform in category web applications 'phpMoneyBooks' Local File Inclusion CVE-2012-1669 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in index.php for module handling that allows for local file inclusion using a...

ASP Classifieds SQL Injection

Exploit Title: ASP Classifieds Sql Injection Date: 17/03/2012 Author: r45c4l Email: [email protected] Script url: http://preproject.com/pclasp/home/default.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

WM Downloader Version 3.1.2.2.2010.04.15 (.m3u) Buffer

Exploit for windows platform in category local exploits !/usr/bin/perl Title : WM Downloader Version 3.1.2.2.2010.04.15 .m3u Buffer Overflow Exploit Author : KaHPeSeSe Download : http://mini-stream.net/downloads/WMDownloader.exe Tested : PERFECT XP PC1 / SP3 Date : 14/03/2012 my $dosya =...

PBLang Bulletin Board System - Local File Inclusion

||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / / || \|| || || || |/ || // // Exploit Title: PBLang...

Jhwebstudio Cross Site Scripting

Exploit Title : jhwebstudio Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.jhwebstudio.com/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork...

Toronto Web Design Cross Site Scripting

Exploit Title : Toronto Cross-Site Scripting Vulnerabilities Author : Zarbat & IrIsT Security Team Discovered By : Am!r Home : Zarbat.Org & IrIsT.Ir Software Link : http://www.123web.ca/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "Toront...