My PDF Creator & DE DM 1.4 iOS - Multiple Vulnerabilities

No description provided by source. Document Title: =============== My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1201 Release Date: ============= 2014-02-16 Vulnerability Laboratory ID VL-ID:...

Cyclope Employee Surveillance Solution 6.0/6.1.0/6.2.0/6.2.1/6.3.0 - SQL Injection

No description provided by source. Author: loneferret of Offensive Security Product: Cyclope Employee Surveillance Solution v6.0 Version: 6.0 Vendor Site: http://www.cyclope-series.com/ Software Download: http://www.cyclope-series.com/download/index.html Software description: The employee...

tftgallery .13 - Directory Traversal exploit

No description provided by source. Released information about the album parameter being vulnerable to XSS earlier. Seems there are other similar issues: The album parameter is vulnerable to directory transversal...

OSSIM 2.1 - SQL Injection and xss

No description provided by source. OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1...

Simple Web Content Management System 1.1-1.3 - Multiple SQL Injection

No description provided by source. Exploit Title: Simple Web Content Management System SQL Injection Date: May 30th 2012 Author: loneferret Version: 1.1 & 1.3 Application Url: http://www.cms-center.com/ Tested on: Ubuntu Server 8.04 / PHP Version 5.2.4-2ubuntu5.23 Discovered by: loneferret Side...

Mail.ru: Cross Site Scripting

Hi Team , Have found a bug in your main domain ".mail.ru" Vulnerable URL: http://deti.mail.ru/mama/ Vulnerable Parameter: Display text , URL links Payload:"/ Steps to Reproduce: 1.Go to the vulnerable link. 2.Click on "Share experiences" , this will open a form. 3.Click on "Insert Link" , give th...

iDevAffiliate 5.x SQL Injection

Exploit Title: iDevAffiliate = v5.x SQL Injection Vulnerability Google Dork: Use your head Date: 4/21/2014 Vendor Homepage: http://www.idevdirect.com/ Version: = v5.x Author: Robert Cooper robert.cooperatareyousecure.net Tested on: Linux/Windows Vulnerable Parameter: ad= PoC:...

FileMaster SY-IT 3.1 LFI / Shell Upload

Document Title: =============== FileMaster SY-IT v3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1170 Release Date: ============= 2013-12-16 Vulnerability Laboratory ID VL-ID: ====================================...

Sql injection

SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter...

GTX CMS 2013 Optima - SQL Injection

GTX CMS 2013 Optima - SQL Injection Document Title: =============== GTX CMS 2013 Optima - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1124 Release Date: ============= 2013-10-29 Vulnerability Laboratory ID VL-ID:...

AVE.CMS 2.09 - index.php?module Blind SQL Injection

AVE.CMS 2.09 - index.php?module Blind SQL Injection !/usr/bin/env python import urllib, sys, time Exploit Title: AVE.CMS " if url:7 != "http://": url = "http://" + url + "/index.php?module=" else: url = url + "/index.php?module=" database = options = 'Version':'VERSION', 'User':'CURRENTUSER',...

SynConnect Pms - index.php?loginid SQL Injection

SynConnect Pms - index.php?loginid SQL Injection Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ======...

[CVE-2013-1463]Wordpress wp-table-reloaded‏ plugin XSS in SWF

Exploit Title: Wordpress wp-table-reloaded plugin XSS in SWF Release Date: 24/01/13 Author: hip Insight-Labs Contact: [email protected] | Website: http://insight-labs.org Software Link: http://downloads.wordpress.org/plugin/wp-table-reloaded.latest-stable.zip Vendor Homepage:...

Fortinet FortiMail 400 IBE - Multiple Vulnerabilities

Title: ====== Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Date: ===== 2013-01-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=701 VL-ID: ===== 701 Common Vulnerability Scoring System: ==================================== 7.1 Introduction: =============...

Zoner Photo Studio 15 b3 - Buffer Overflow (PoC)

Zoner Photo Studio 15 b3 - Buffer Overflow PoC Title: ====== Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities Date: ===== 2012-11-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=759 VL-ID: ===== 759 Common Vulnerability Scoring System:...

WordPress Plugin Spider Catalog 1.1 - HTML Code Injection / Cross-Site Scripting

1 1 0 I'm D4NB4R member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Exploit Title: Wordpress Plugin Catalog HTML Code Injection and Cross-site scripting Dork: N/A Date: 31-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Version: 1.1...

Omnistar Document Manager 8.0 LFI / XSS / SQL Injection

Title: ====== Omnistar Document Manager v8.0 - Multiple Vulnerabilities Date: ===== 2012-10-03 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=712 VL-ID: ===== 712 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: =============...

Mediachurch CMS SQL Injection

Exploit Title: mediachurch CMS sql injection Google Dork: " Powered by MediaChurch & Calvary Episcopal Church" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://mediachurch.com/ Version: All Version Category:: webapps Tested on: GNU/Linux...

Joomla Component com_fireboard - SQL Injection Vulnerability

Exploit for php platform in category web applications Joomla comfireboard - SQL Injection Vulnerability Details: ======== A SQL Injection vulnerability is detected in the comfireboard module of the joomla Content Management System. Remote attackers & low privileged user accounts can execute/injec...

Simple Web Content Management System 1.1 SQL Injection

Exploit Title: Simple Web Content Management System SQL Injection Date: May 30th 2012 Author: loneferret Version: 1.1 Application Url: http://www.cms-center.com/ Tested on: Ubuntu Server 8.04 / PHP Version 5.2.4-2ubuntu5.23 Discovered by: loneferret Side note: This application is nothing fancy, a...