Flexap.am Control Panel 5.1 Blind SQL Injection

===================================================== Vulnerable software: Control Panel version 5.1 Vendor: http://www.flexap.am/ Vuln type: Blind SQL Injection Software License: Commercial Software: Control Panel version 5.1 Discovered and Exploited in Wild...

Fluger Edit 2 Blind SQL Injection / Cross Site Scripting

===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild ===================================================== Dork...

Sciretech 3.0.0 SQL Injection / CSRF

========================================================= Vulnerable Software: Sciretech ® Multimedia Manager Version 3.0.0 Aka: Sciretech ® File Manager Version 3.0.0 Official site: www.sciretech.com Vulnerabilities: Blind SQL Injection And CSRF Dork: Google is Best Your Friend.Isn't? Discovered...

vBulletin Yet Another Awards System 4.0.2 SQL Injection

Exploit for php platform in category web applications Exploit Title: vBulletin Yet Another Awards System 4.0.2 Time Based SQL Injection 0day Google Dork: inurl:awards.php intext:"powered by vbulletin" Date: 29/08/12 Exploit Author: AntiPaste Software Link:...

Looking to Bolster Security, Dropbox Adds Two-Factor Authentication

Several weeks after announcing that some of its users’ log-ins and passwords had been stolen, file storage company Dropbox announced it has added a two-step authentication process over the weekend to help reinforce the security of its users’ accounts. The added layer of security is currently...

xt:Commerce 3.04 SP2.1 Blind SQL Injection

+---------------------------------+ | xt:Commerce = v3.04 SP2.1 | | commerce:SEO = v2.1 CE | | Gambio = v2.0.10 SP1.4 | | Time Based Blind SQL Injection | +---------------------------------+ Author.............: Ralf Zimmermann Mail...............: infoATstoffline.com Vendor Homepage....:...

xt:Commerce 3.04 SP2.1 - Blind SQL Injection

xt:Commerce 3.04 SP2.1 - Blind SQL Injection +---------------------------------+ | xt:Commerce = v3.04 SP2.1 | | commerce:SEO = v2.1 CE | | Gambio = v2.0.10 SP1.4 | | Time Based Blind SQL Injection | +---------------------------------+ Author.............: Ralf Zimmermann Mail...............:...

xt:Commerce 3.04 SP2.1 - Blind SQL Injection

+---------------------------------+ | xt:Commerce = v3.04 SP2.1 | | commerce:SEO = v2.1 CE | | Gambio = v2.0.10 SP1.4 | | Time Based Blind SQL Injection | +---------------------------------+ Author.............: Ralf Zimmermann Mail...............: infoATstoffline.com Vendor Homepage....:...

MagyCMS 2.0.1121 BETA Blind SQL Injection

Region ; Directives created by AutoIt3WrapperGUI AutoIt3WrapperOutfile=cpl.exe AutoIt3WrapperUseUpx=n AutoIt3WrapperChange2CUI=y EndRegion ; Directives created by AutoIt3WrapperGUI NoTrayIcon include include include include cs THIS IS A COMPLETE EXPLOIT WHICH IS WRITEN IN AUTOIT...

Blind SQL Injection in Webmatic

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Webmatic, which can be exploited to perform Blind SQL Injection attacks. 1 Blind SQL Injection in Webmatic: CVE-2012-3350 1.1 Input passed via the "Referer:" field of the HTTP header to index.php is not properly sanitised...

Joomla com_etree Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla cometree Blind SQL-inj Vuln Date: 20.02.2012 Author: Mach1ne Version: 1.5.+ Category:: remote, webapps Google dork: inurl:compersonal Tested in: web ============================== ================================= Multipl...

CommonSense CMS Blind SQL Injection

Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on:...

CommonSense CMS script Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CommonSense CMS script Blind SQL Injection Vulnerability Google Dork: intext:"Powered by CommonSense CMS script" Date: 6/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Versi...

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection

Authenex A-KeyASAS Web Management Control 3.1.0.2 - Blind SQL Injection ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at...

Authenex A-Key/ASAS Web Management Control 3.1.0.2 (latest)

Exploit for multiple platform in category web applications ============================================================ FOREGROUND SECURITY, SECURITY ADVISORY 2011-002 - Original release date: September 21, 2011 - Discovered by: Jose Carlos de Arriba - Senior Security Analyst at Foreground Securi...

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be...

BlueSoft Rate My Photo Site SQL Injection

Script Name : BlueSoft Rate My Photo Site Vulnerable Type : Blind SQL Ýnjection Time Based Author : darkTR Date : 08.08.2011 E-mail : [email protected] Target: : index.php?cmd=SQLi Demo: : http://shopbluesoft.com/demo7/index.php?cmd=10&ty=2SQLi darkTR / Code Hunters TIM...

Joomla 1.5 VirtueMart 1.1.7 Blind SQL Injection

Exploit Title: Joomla 1.5 comvirtuemart 'Joomla 1.5 VirtueMart Component %q A vulnerability was discovered by Rocco Calvi and Steve Seeley which identifies unauthenticated time-based blind SQL injection in the "page" variable of the virtuemart component. This vulnerability allows an attacker to...

Joomla! Component com_virtuemart 1.1.71.5 - Blind SQL Injection (Metasploit)

Joomla! Component comvirtuemart 1.1.71.5 - Blind SQL Injection Metasploit Exploit Title: Joomla 1.5 comvirtuemart 'Joomla 1.5 VirtueMart Component %q A vulnerability was discovered by Rocco Calvi and Steve Seeley which identifies unauthenticated time-based blind SQL injection in the "page" variab...

ICMP Timestamp Detection

The remote host responded to an ICMP timestamp request. The Timestamp Reply is an ICMP message which replies to a Timestamp message. It consists of the originating timestamp sent by the sender of the Timestamp as well as a receive timestamp and a transmit timestamp. This information could...