15181 matches found
CVE-2017-1002024
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/uploadjson.php does not check authentication before allow users to upload files...
CVE-2017-1002024
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/uploadjson.php does not check authentication before allow users to upload files...
Authentication flaw
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/uploadjson.php does not check authentication before allow users to upload files...
CVE-2017-1002024
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/uploadjson.php does not check authentication before allow users to upload files...
Justdial Clone Script - fid SQL Injection
Justdial Clone Script - fid SQL Injection Exploit Title: Justdial Clone Script - SQL Injection Dork: N/A Date: 14.09.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software Link: http://www.exclusivescript.com/product/z1mt4303451/php-scripts/justdial-clone-script Demo:...
Enterprise Edition Payment Processor Script 3.7 SQL Injection
Exploit Title: Enterprise Edition Payment Processor Script 3.7 - SQL Injection Dork: N/A Date: 14.09.2017 Vendor Homepage: https://www.goterhosting.com/ Software Link: https://www.goterhosting.com/payment-processor-script.php Demo: http://www.enterprise-edition.gvmhosting.com/ Version: 3.7...
Enterprise Edition Payment Processor Script 3.7 - SQL Injection
Exploit Title: Enterprise Edition Payment Processor Script 3.7 - SQL Injection Dork: N/A Date: 14.09.2017 Vendor Homepage: https://www.goterhosting.com/ Software Link: https://www.goterhosting.com/payment-processor-script.php Demo: http://www.enterprise-edition.gvmhosting.com/ Version: 3.7...
Tor: Sql query disclosure,
Hi, path:- https://trac.torproject.org/projects/tor/query?status=accepted&status=assigned&status=mergeready&status=needsinformation&status=needsreview&status=needsrevision&status=new&status=reopened&component=- Select a...
ICCallLimousine 1.1 - key SQL Injection
ICCallLimousine 1.1 - key SQL Injection Exploit Title: Car Rental Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/limousine-car-hire-script.html Demo: http://icloudcenter.net/demos/iccalllimousine/...
ICCallLimousine 1.1 - 'key' SQL Injection
Exploit Title: Car Rental Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/limousine-car-hire-script.html Demo: http://icloudcenter.net/demos/iccalllimousine/ Version: 1.1 Category: Webapps Tested on:...
ICStudents 1.2 - 'key' SQL Injection
Exploit Title: Students Course Assessment Test Script 1.2 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/student-course-assessment-test-script.htm Demo: http://icloudcenter.net/demos/icstudents/ Version: 1.2...
ICProductConfigurator 1.1 - 'key' SQL Injection
Exploit Title: Customized Products Shopping Script 1.1 - SQL Injection Dork: N/A Date: 13.09.2017 Vendor Homepage: http://www.icloudcenter.com/ Software Link: http://www.icloudcenter.com/bpProductConfigurator.htm Demo: http://icloudcenter.net/demos/icproductconfigurator/ Version: 1.1 Category:...
FoodStar 1.0 - SQL Injection
Exploit Title: FoodStar Swiggy Clone Script 1.0 - SQL Injection Dork: N/A Date: 12.09.2017 Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/foodstar-swiggy-clone/ Demo: http://abservetechdemo.com/products/foodstar/ Version: 1.0 Category: Webapps Tested on:...
Online Print Business Software 1.0 SQL Injection
Exploit Title: Online Print Business Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/online-print-business Demo: http://onlineprintbssiness.scriptzee.com/ Version: 1.0 Category: Webapps Tested on:...
iTech Book Store Script 2.02 - SQL Injection
Exploit Title: iTech Book Store Script v2.02 - SQL Injection / Reflected XSS Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: http://itechscripts.com/ Software Link: http://itechscripts.com/book-store-script Version: 2.02 Tested on: Kali Linux 2.0 | Mac OS 10.12.6 Email: contact@8bitsec....
JobStar Monster Clone Script 1.0 - SQL Injection
JobStar Monster Clone Script 1.0 - SQL Injection Exploit Title: JobStar Monster Clone Script v1.0 - SQL Injection Date: 2017-09-11 Exploit Author: 8bitsec Vendor Homepage: https://www.abservetech.com/ Software Link: https://www.abservetech.com/jobstar-monster-clone/ Version: 1.0 Tested on: Kali...
Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin)
Nimble Professional 1.0 - Cross-Site Request Forgery Update Admin Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile...
Nimble Professional 1.0 - Cross-Site Request Forgery (Update Admin) Vulnerability
Exploit for php platform in category web applications Edit Profile: Admin Name: Admin Email: Admin Password: Save Profile 0day.today 2018-02-15...