Dportal WAP-CMS 1.1 File Disclosure / XSS

========================================== Dportal wap-cms Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

Skybluecanvas 1.1 r237 - 'admin.php' Directory Traversal

source: https://www.securityfocus.com/bid/44397/info SkyBlueCanvas is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue requires administrative privileges and may allow an attacker to obtain sensitive information that...

Flash Image Gallery 1.1 File Disclosure

0x01 Informations: Script : Flash Image Gallery 1.1 and maybe last version Download : http://www.flashimagegallery.com/download/fig116admin110.zip Vulnerability : Sensitive Data Disclosure Author : DarkbiteX Greets: : |OverclockiX| , |0oZeuzo0|, |Status-X|, |Fatal Inside|, |NaOnack|, |Good-Spide|...

DMXReady Registration Manager 1.1 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================================== DMXReady Registration Manager 1.1 Arbitrary File Upload Vulnerability =====================================================================...

PHPenpals <= 1.1 (mail.php ID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== PHPenpals D | | -p0c: | -SQL INJECTION: | | -http://localhost/Scripts/phpenpals/mail.php?ID=-1+union+select+1,@@version-- | -Vuls: @array = 'profile.php?personalID=' ,...

S-CMS version 1.1 suffers from a local file inclusion vulnerability in plugin.php

s-cms/plugin.php code: $page=$GET'page'; error 1 $sqlselectplugincase= mysqlquery"SELECT FROM ".$prefix."plugins WHERE active = '1' AND file='$page'"; if $sqlselectplugincase include "plugins/$page"; error 2 S-CMS version 1.1 暂无 yildirimordulari.com/s-cms/plugin.php?page=File for demo:...

Simple Machines Forum Multiple Vulnerabilities

This host has Simple Machines Forum installed which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbsimplemachinesforummultvulnapr09.nasl 4869 2016-12-29 11:01:45Z teissa $ Simple Machines Forum Multiple Vulnerabilities. Authors: Nikita MR Copyright: Copyright c 2009...

SkyPortal Downloads Manager 1.1 Contents Change

@=Script :SkyPortal Downloads Manager v1.1 @=S.Site :http://skyportal.net @=Download :http://skyportal.net/downloads/modules/moddownloads11.zip @=Demo :http://vegtrafikk.net @=======================================@ @=Vul: @=http://site.com/ PATH /admindlbrowse.asp @=http://site.com/ PATH...

PT-2009-2950 · Flax · Flax Article Manager

Name of the Vulnerable Software and Affected Versions: Flax Article Manager version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in the category.php file. Recommendations: For Flax Article Manager version 1.1,...

Natterchat 1.1 - Remote Authentication Bypass

============================================================================== NATTERCHAT v1.1 Admin Home Bypass Vulnerability ============================================================================== » Script : NATTERCHAT v1.1 » Discover: Mountassif Moad === XPL === »...

Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier. Such versions are potentially affected by several vulnerabilities APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18: - A potential port-scanning issue. CVE-2007-4324 - Possible privilege escalation...

UM Software Signup 1.1 - Authentication Bypass

UM Software Signup 1.1 - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

MatterDaddy Market 1.1 - 'login.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30848/info MatterDaddy Market is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Matterdaddy Market 1.1 - 'index.php' Multiple SQL Injections

Author: !DoktOR! Contact: coder5attopmail.kz Home Page: www.antichat.ru Date found: 25.08.08 Product: Market Version: 1.1 Download script: http://www.matterdaddy.com/4/scripts/marketv11.zip Vulnerability Class: SQL Injection magicquotesgpc = Off http://localhost/installdir/ Exploit:...

Matterdaddy Market 1.1 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Matterdaddy Market 1.1 Multiple SQL Injection Vulnerabilities =============================================================...

erocms-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site : www.erocms.de D0rk : "by eroCMS" -:: S...

eroCMS 1.4 - site SQL Injection

eroCMS 1.4 - site SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eroCMS V1.0 - V1.1 - V1.2 - V1.3 - V1.4 index.php site AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : eroCMS Vesrion : 1.0 - 1.1 - 1.2 - 1.3 - 1.4 site :...

WebChamado 1.1 Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================== WebChamado 1.1 Arbitrary Add Admin Exploit ========================================== !/usr/bin/perl ============================================ WebChamado 1.1 Arbitrary Add Admin Exploit...

SamTodo 1.1 - 'completed' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29569/info SamTodo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of th...

沸腾展望新闻系统任意文件下载漏洞

漏洞文件: down.asp Const adTypeBinary = 1 FileName = Request.QueryString"FileName" if FileName = "" Then Response.Write "无效文件名！" Response.End End if FileExt = MidFileName, InStrRevFileName, "." + 1 Select Case UCaseFileExt Case "ASP", "ASA", "ASPX", "ASAX", "MDB" Response.Write "非法操作！" Response.End E...