Title Web Solutions Blind SQL-i Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

cFTP 0.1 r80 Shell Upload

Software Link: https://code.google.com/p/clients-oriented-ftp/downloads/list Version: 0.1 Tested on: linux // Vulnerable URL $url = 'http://url domain/cFTP/'; // The file to upload $filename = dirnameFILE.'/info.php'; $failext = array'php', 'pl'; $username = 'hackname'.rand0, 999999;...

CVE-2011-2743: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Chyrp 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the action parameter to 1 the default URI or 2 includes/javascript.php, or the 3 title or 4 body parameter to admin/help.php...

PT-2011-4055

Name of the Vulnerable Software and Affected Versions Chyrp versions 2.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the action parameter to the default URI or includes/javascript.php, or the title or body parameter to...

Symantec Backup Exec 12.5 - Man In The Middle

Exploit Title: Symantec Backup Exec MiTM Attack Date: 27/05/2011 Author: Nibin Software Link: http://www.symantec.com/business/products/family.jsp?familyid=backupexec Version: - Symantec Backup Exec for Windows Servers versions 11.0, 12.0, and 12.5 - Symantec Backup Exec 2010 versions 13.0 and 13...

Various Indian Sites Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %+++++++++++++++++++++++++++++ +++++++++++ Exploit Title: .in.com XSS vulnerability Vendor: various Date: 6th july,2011 Author: r007k17 a.k.a Raghavendra Karthik D link: http://shadowrootkit.wordpress.com/ Google Dork: © Copyright...

VietNext CMS Multiple Vulnerabilities

Exploit for php platform in category web applications + Exploit Title:Multiple Vulnerabilities + Date: 2011 + script:VietNext cms + Software: http://vietnextco.com & http://vietnext.vn + Author : pentesters.ir + Website : WwW.PenTesters.IR + dorks :"Developed & Design By VietNext" and "Design by...

SVM Infotech SQL injection Vulnerability

Exploit for php platform in category web applications ‡‡‡‡‡‡‡‡‡‡‡‡‡‡ + Exploit Title : SVM Infotech.. SQL injection Vulnerability + Author : k's0uR! + Category : WebApps + d0rk : "Developed & Managed By: SVM Infotech"Or"Designed & Developed By: SVM Infotech" + Tested o...

Technote 7.2 - Blind SQL Injection

Exploit Title: technote blind sql injection Google Dork: inurl:/technote7/board.php?board= Date: 2011.06.11 Author: BlueH4G http://blueh4g.org Software Link: http://www.technote.co.kr/php/technote1/board.php?board=consult&command=skininsert&exe=insertdownshop Version: technote7.2 && Mysql 3.x sor...

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh New Features in this version 0x01A Bind Shell 0x01B Back Connect 0x01C Fixed Some Coding errors! 0x01D Rename Files 0x01E Encoded Title Download or Read More...

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh

Ani-Shell v1.1 - Back-Connect and Bind-Shell Features by lionaneesh New Features in this version 0x01A Bind Shell 0x01B Back Connect 0x01C Fixed Some Coding errors! 0x01D Rename Files 0x01E Encoded Title Download or Read More...

Nmap NSE net: http-title

Shows the title of the default page of a web server. The script will follow no more than one HTTP redirect, and only if the redirection leads to the same host. The script may send a DNS query to determine whether the host the redirect leads to has the same IP address as the original target. SYNTA...

Nmap NSE net: http-title

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

E-Manage MySchool 7.02 SQL Injection

Exploit Title: SQL Injection MySchool Version 7.02 Google Dork: "MySchool Version 7.02" Date: 05-21-2011 Software Link: http://em.com.eg/ Version: Version 7.02 Author: az7rb Tested on : winxp sp3 Ar end bt5 Homepage : www.p0c.cc Greetz : p0c Team & Dr.NaNo & All My Msn Messenger Friends wWw.p0c.c...

E-Manage MySchool 7.02 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection MySchool Version 7.02 Google Dork: "MySchool Version 7.02" Date: 05-21-2011 Software Link: http://em.com.eg/ Version: Version 7.02 Author: az7rb Tested on : winxp sp3 Ar end bt5 Homepage : www.p0c.cc Greetz : p0c...

Devil shell v1.2 - Php shell with DDoS feature !

Devil shell v1.2 - Php shell with DDoS feature ! Features : 1. Design 2. Permission Change of file / Folders 3. Improved DDoS 4. Create Folder 5. Multi uploading 6. Encrypted Title so hard to find by Google. Download Link Username : ugdevil Password : 1234567 For further Query mail me at :...

A-PDF WAV To MP3 Converter 1.2.0 DEP Bypass

Exploit Title: A-PDF Wav to MP3 Converter v 1.2.0 DEP Bypass Software Link: http://www.a-pdf.com/wav-to-mp3/a-pdf-wtm.exe Version: 1.2.0 Tested on: Win XP SP3 French Date: 12/05/2011 Author: h1ch4m Hicham Oumounid Email: [email protected] Home: http://net-effects.blogspot.com Big thanks to...

CVE-2011-1504

Cross-site scripting XSS vulnerability in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title...

Cross site scripting

Cross-site scripting XSS vulnerability in Liferay Portal Community Edition CE 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title...

PT-2011-3171

Name of the Vulnerable Software and Affected Versions Liferay Portal Community Edition versions 5.x through 6.0.5 Description A cross-site scripting issue allows remote authenticated users to inject arbitrary web script or HTML via a blog title. Recommendations For versions 5.x through 6.0.5,...