GeoCore MAX DB 7.3.3 Blind SQL Injection

Exploit Title: GeoCore MAX DB Ver. 7.3.3 - Time-Based Blind Injection Official site: http://geodesicsolutions.com Risk Level: High Demo : http://geodesicsolutions.com/demo/ Exploit Author: Esac Homepage author : www.iss4m.ma Last Checked: 25/04/2014 +----------+ | OVERVIEW | +----------+ GeoCore ...

PHP Event Calendar SQL Injection

Exploit Title: PHP Event Calendar / SQL Injection Vulnerability Date: 14/04/2014 Author: Daniel Godoy Author Mail: danielgodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: PHP Event Calendar Software Link: http://codecanyon.net/item/php-event-calendar/47723 Tested on...

godontologico 5 SQL注入漏洞

No description provided by source. 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests as indicated on the output. You might use sqlmap -l to load it though. Admin hashes under Table ‘funcionarios' on column ‘senha'. PoC: POST /gco/wallpapers/indexajax.php HTTP/1.1...

Pizza Inn Project SQL Injection

Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injection Vulnerable Code: +...

PizzaInn_Project SQL注入漏洞

No description provided by source. 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injection Vulnerable Code: + reserve-exec.php $id = $GET'id'; $qry = "INSERT INTO reservationsdetailsmemberid,tableid,partyhallid,ReserveDate,ReserveTime,tableflag,partyhallflag...

godontologico 5 SQL Injection

Exploit: 0day godontologico v5 - SQL Inject + Author: vinicius777 + Contact: vinicius777 AT gmail - @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/godontologico/ + Google D0rks: "Smile Odonto - Enhancing your smile - www.smileodonto.com.br" + Google D0rks: "Smile Odonto ® -...

Easy POS System SQL注入漏洞

No description provided by source. 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You might use ‘sqlmap -l’ to load it though. PoC: POST /login.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux i686; rv:22.0...

PizzaInn_Project - SQL Injection

PizzaInnProject - SQL Injection + Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injecti...

Easy POS System - SQL Injection Vulnerability

Exploit for php platform in category web applications + Exploit: Easy POS System - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/easypossystem/ 1 Sql Injection POST Time Based Blind Note: Time based Injection on...

godontologico 5 - SQL Injection

godontologico 5 - SQL Injection + Exploit: 0day godontologico v5 - SQL Inject + Author: vinicius777 + Contact: vinicius777 AT gmail - @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/godontologico/ + Google D0rks: "Smile Odonto - Enhancing your smile - www.smileodonto.com.br" +...

PizzaInn_Project SQL Injection Vulnerability

Exploit for php platform in category web applications + Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC:...

PizzaInn_Project - SQL Injection

Exploit: PizzaInnProject - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/restaurantmis/ 1 Sql Injection Time Based Blind PoC: http://127.0.0.1/reserve-exec.php?id=1' SQL Injection Vulnerable Code: +...

Easy POS System - 'login.php' SQL Injection

Exploit: Easy POS System - SQL Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/easypossystem/ 1 Sql Injection POST Time Based Blind Note: Time based Injection on POST requests using burp, as output indicated. You...

iScripts AutoHoster PHP Code Injection Vulnerability

iScripts AutoHoster suffers from file disclosure, PHP code injection, file disclosure, and remote SQL injection vulnerabilities. ?php / + iScripts AutoHoster + Multiple vulnerabilities , PHP Code injection Exploit + Author : i-Hmx + email protected + sec4ever.com , 1337s.cc I.Sql Injection Vuln...

iScripts AutoHoster - additionalsettings.php SQL Injection

iScripts AutoHoster - additionalsettings.php SQL Injection source: https://www.securityfocus.com/bid/64377/info iScripts AutoHoster is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromi...

iScripts AutoHoster PHP Code Injection

?php / + iScripts AutoHoster + Multiple vulnerabilities , PHP Code injection Exploit + Author : i-Hmx + [email protected] + sec4ever.com , 1337s.cc I.Sql Injection Vuln /checktransferstatus.php Table name : submit=faris&cmbdomain=i-Hmx' /!1337union all select 0x6661726973,select distinct...

iScripts AutoHoster - 'additionalsettings.php' SQL Injection

source: https://www.securityfocus.com/bid/64377/info iScripts AutoHoster is prone to multiple security vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit laten...

Monkey CMS - Multiple Vulnerabilities

Exploit Title: Monkey CMS - Multiple Vulnerabilities Date: 2013 17 June Exploit Author: Yashar shahinzadeh & Mormoroth Vendor Homepage: http://www.monkeycms.com/ Tested on: Linux & Windows, PHP 5.3.10 Affected Version : All versions Contacts: http://Twitter.com/YShahinzadeh ,...

airVisionNVR 1.1.13 Disclosure / SQL Injection

Exploit Title: airVisionNVR readfile disclosure and sql injection Google Dork: Date: Oct 13, 2012 Exploit Author: pennyGrit Vendor Homepage: http://www.ubnt.com/ Software Link: http://www.ubnt.com/downloads/airvision/airVision-v1.1.3-installer.exe Version: 1.1.13 Tested on: WinXP SP3 CVE: Possibl...

webERP 4.08.4 SQL Injection

Exploit Title: webERP =4.08.4 WorkOrderEntry.php SQL Injection Vulnerability Date: 14/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.weberp.org Software Link: http://sourceforge.net/projects/web-erp/files/ Version: 4.08.4 Tested on: Windows 2003 Standard...