Constructr CMS 3.03 Arbitrary File Upload

No description provided by source. !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and...

kleeja 1.0.0RC6 Database Disclosure

No description provided by source. ==================================================== kleeja1.0.0RC6 Database Disclosure Exploit ==================================================== Vendor: kleeja.com Date: 2010-05-27 Author : indoushka Contact : 00213771818860 Home : www.sec4ever.com Bug :...

Real player 14.0.2.633 - 0day Buffer overflow/DOS Exploit

No description provided by source. !/usr/bin/perl +Exploit Title: Real player 14.0.2.633 Buffer overflow/DOS Exploit +Software Link: www.soft32.com/download122615.html +Software: Real player +Version: 14.0.2.633 +Tested On: WIN-XP SP3 + Date : 31.03.2011 + Hour : 13:37 PM Similar Bug was found by...

eNdonesia 8.4 - SQL Injection Vulnerability

No description provided by source. ======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork :...

autonomous lan party <= 0.98.3 - Remote File Inclusion Vulnerability

No description provided by source. ============================================================================================================ x Autonomous LAN party = 0.98.3 Remote File Include Vulnerability || ! Download Script : ||...

SoftBizScripts Dating Script SQL Injection Vunerability

No description provided by source. Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:searchresults.php?browse=1 Code :...

GlobalWebTek Design SQL Injection Vulnerability

No description provided by source. .----..--.--.| |--..-----..----.| |.-----..-----. | || | || || -|| || || || | ||| ||||||| ||||| | || || GlobalWebTek Design SQL Injection Vulnerability Vendor: http://www.globalwebtek.com/ Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnli...

PHPope <= 1.0.0 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. x PHPope = 1.0.0 Multiple Remote File Include Vulnerability ! Download Script : http://sourceforge.net/projects/phpope/files/ ! Author : cr4wl3r ! Contact : cr4wl3r4tlinuxmaildotorg ! Location : Gorontalo - INDONESIA ! Dork : FuCk y0u MaLaYsia x 3xplo!t :...

GDL 4.2 XSS / SQL Injection / Traversal

Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...

GDL 4.2 - Multiple Vulnerabilities

Title : GDL 4.2 Multiple Vulnerabilities - Down. Script : http://kmrg.itb.ac.id/ - http://kmrg.itb.ac.id/gdl42.zip - Author : ByEge - Home : http://byege.blogspot.com.tr/ - Tested : Apache/2.2.22 Win32 PHP/5.4.3 - Date : 26/02/2014 - Google Dork : "Powered by GDL 4.2" And "gdl.php?mod=browse" -...

WordPress Thanks You Counter Button 1.8.7 Cross Site Scripting

============================================================== Title ...| Thanks You Counter Button XSS Version .| thanks-you-counter-button 1.8.7 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://www.wordpress.org/plugins/...

XAMPP 3.2.1 Cross Site Scripting Vulnerability

Exploit for multiple platform in category local exploits Title : XAMPP 3.2.1 Cross Site Scripting Author : DevilScreaM Date : 15 January 2014 Category : Web Applications Vendor : http://sourceforge.net/projects/xampp Version : 3.2.1 Type : PHP Greetz : 0day-id.com | newbie-security.or.id | Borneo...

Dynamic Biz Website Builder SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Tybe: Multiple Vulnerabilities Vendor: http://www.etoshop.com/ + Software: Dynamic Biz Website Builder QuickWeb + infection: Multiple Vulnerabilities Version : author: R3d-D3v!L + TEAM: ABH ?...

WordPress Blogggie Shell Upload

Exploit Title : Wordpress Themes Bloggie Arbitrary File Upload Vulnerability Author : ReC0ded Vendor : http://themify.me/ Download : http://themify.me/themes/Bloggie Date : 22, November 2013. Type : php, html, htm, asp, etc. Category : Web Applications Vulnerability : File Upload Tested On :...

WordPress Woopra plugin remote PHP arbitrary code execution exploit.

No description provided by source. Exploit Title: woopra plugins execute arbitrary PHP code Exploit Google Dork: inurl:/plugins/woopra/inc/php-ofc-library , inurl:wp-content/plugins/woopra/inc/ Date: 06-10-2013 Exploit Author: wantexz Vendor Homepage:wordpress.org/plugins/woopra/ Software Link:...

Dolphin v7.0 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ArrowChat 1.5.61 - Multiple Vulnerabilities

ArrowChat 1.5.61 - Multiple Vulnerabilities Exploit Title: ArrowChat ?do=" enctype="multipart/form-data" --------------------...

gpEasy CMS - XSS Vulnerability

gpEasy CMS, http://www.gpeasy.com/ Easy to use True WYSIWYG Editing. Flat-file data storage and advanced resource management for fast websites. 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /'...

PHP-Nuke 8.2 SQL Injection

Exploit Title : Nuke 8.2 Modules Bilnd SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://phpnuke.org/ Security Risk : High - Bilnd SQL Injection Version : All Version Dork :...

WordPress ArribaLaEsteban SQL Injection

|| | || || | | | | 0 | In the name of GOD | -|- | | | ||||| Exploit Title:Wordpress | ArribaLaEsteban theme SQL Injection Vulnerability | Google Dork: inurl:/estadisticas/fichajugador.php Exploit Author: Ashiyane Digital Security Team Category: Web Application Tested on: Windows 7 | | Location:...