Filmis 0.2 Beta - Multiple Vulnerabilities

Filmis 0.2 Beta - Multiple Vulnerabilities =================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis ...

BOOKSolved 1.2.2 File Disclosure

...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor: http://www.usolved.net/ ...Download:...

CF Image Hosting Script 1.3.82 - File Disclosure

CF Image Hosting Script 1.3.82 - File Disclosure !/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor:...

CF Image Hosting Script 1.3.82 - File Disclosure

!/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor: http://www.phpkode.com Download:...

Feed on Feeds 0.5 - Remote PHP Code Injection

Feed on Feeds 0.5 - Remote PHP Code Injection strtolower$b"'.$key.'" ? -1 : 1;'; 1096. 1097. else 1098. 1099. $compare = createfunction'$a,$b','if strtolower$a"'.$key.'" == strtolower$b"'.$key.'" return 0;else return strtolower$a"'.$key.'" strtolower$b"'.$key.'" ? -1 : 1;'; 1100. 1101. 1102...

WordPress Plugin AdRotate 3.6.5 - SQL Injection

Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ifisset$GET'track' OR $GET'track' != '' $meta = urldecode$GET'track'; ... list$ad, $group, $block = explode"-", $meta; ... $bannerurl = $wpdb-getvar"SELEC...

WordPress Plugin Link Library 5.2.1 - SQL Injection

Exploit Title: WordPress Link Library plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0%23 --------------- Vulnerable code --------------- ./link-library-ajax.php: echo $mylinklibraryplugin-LinkLibrary...; ./link-library.php: class linklibraryplugin ... function LinkLibrary... return...

WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion

WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software...

WordPress Plugin Livesig 0.4 - Remote File Inclusion

WordPress Plugin Livesig 0.4 - Remote File Inclusion Exploit Title: Livesig Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/livesig Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/livesig/downloa...

WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion

WordPress Plugin Annonces 1.2.0.0 - Remote File Inclusion Exploit Title: Annonces Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/annonces Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Mini Mail Dashboard Widget 1.36 Remote File Inclusion

Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Disclosure Policy 1.0 Remote File Inclusion

Exploit Title: Disclosure Policy Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/disclosure-policy-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/disclosure-policy-plugin/download/...

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software...

WordPress Plugin TheCartPress 1.1.1 - Remote File Inclusion

WordPress Plugin TheCartPress 1.1.1 - Remote File Inclusion Exploit Title: Thecartpress Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/thecartpress Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Plugin AllWebMenus 1.1.3 - Remote File Inclusion

Exploit Title: Allwebmenus Wordpress Menu Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/allwebmenus-wordpress-menu-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

WordPress Plugin Disclosure Policy 1.0 - Remote File Inclusion

Exploit Title: Disclosure Policy Plugin Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/disclosure-policy-plugin Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link: http://wordpress.org/extend/plugins/disclosure-policy-plugin/download/...

WordPress Plugin Mini Mail Dashboard Widget 1.36 - Remote File Inclusion

Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress TheCartPress Plugin 1.1.1 Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Thecartpress Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/thecartpress Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress Mailing List Plugin 1.3.2 Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Mailing List Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mailz Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...

Wordpress Annonces Plugin 1.2.0.0 Remote File Inclusion

Exploit for php platform in category web applications Exploit Title: Annonces Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/annonces Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...