phpSFP Schedule Facebook Posts 1.5.6 - SQL Injection

| | / | \ | |/ |/ | / | | | | | | | | | | | | | / \ | | | || || | |\ | || | | / | | |/|| ||// \| phpSFP - Schedule Facebook Posts 1.5.6 SQL Injection 0-day Website : http://codecanyon.net/item/phpsfp-schedule-facebook-posts/5177393 Exploit Author : @u0x Pichaya Morimoto Release dates :...

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection +Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker...

Joomla! Component Contact Form Maker 1.0.1 - SQL Injection

+Title: Joomla Contact Form Maker v1.0.1 Component - SQL injection vulnerability +Author: TUNISIAN CYBER +Date: 29/03/2015 +Vendor: http://extensions.joomla.org/extensions/extension/contacts-and-feedback/contact-forms/contact-form-maker +Type:WebApp +Risk:High +Overview: Contact Form Maker v1.0.1...

WordPress Plugin InBoundio Marketing 1.0 - Shell Upload Vulnerability

Exploit for php platform in category web applications Dx . Made In Algeria . xZ Title : WordPress plugin InBoundio Marketing Shell Upload Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload /...

WordPress Plugin InBoundio Marketing 1.0 - Arbitrary File Upload

Dx . Made In Algeria . xZ Title : WordPress plugin InBoundio Marketing Shell Upload Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload / Code Exec 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

WordPress InBoundio Marketing Shell Upload

Dx . Made In Algeria . xZ Title : WordPress plugin InBoundio Marketing Shell Upload Vulnerability Author : KedAns-Dz + E-mail : ked-h @hotmail.com + FaCeb0ok : fb.me/K3d.Dz + TwiTter : @kedans Platform : PHP / WebApp + Cat/Tag : File Upload / Code Exec 3 3 Greetings t0 Palestine 3 3 ! Vendor :...

Codiad 2.5.3 - LFI Vulnerability

Exploit for php platform in category web applications +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

Ckeditor 4.4.7 Shell Upload / Cross Site Scripting

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

Codiad 2.5.3 Local File Inclusion

+Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP ////////////////////////////////////////////////////////////////// // Run Download...

Codiad 2.5.3 - Local File Inclusion

Codiad 2.5.3 - Local File Inclusion +Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP...

Codiad 2.5.3 - Local File Inclusion

+Title: Codiad v2.5.3 - LFI Vulnerability +Author: TUNISIAN CYBER +Date: 12/03/2015 +Type:WebApp +Risk:High +Overview: Pie Register 2.x suffers, from a Local File Disclosure vulnerability. +Proof Of Concept: PHP ////////////////////////////////////////////////////////////////// // Run Download...

WordPress Pie Register 2.0.14 Cross Site Scripting

+Title: Wordpress Pie Register Plugin 2.0.14 - XSS Vulnerability +Author: TUNISIAN CYBER +Date: 09/03/2015 +Type:WebApp +Risk:High +Affected Version:All +Overview: Pie Register 2.x suffers, from an XSS vulnerability. +Proof Of Concept: PHP global $pieregdirpath; includeonce...

CVE-2014-9465

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform ZCP 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service /tmp disk consumption by uploading a large number of files...

Code injection

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform ZCP 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service /tmp disk consumption by uploading a large number of files...

CVE-2014-9465

senddocument.php in Zarafa WebApp before 2.0 beta 3 and WebAccess in Zarafa Collaboration Platform ZCP 7.x before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1 allows remote attackers to cause a denial of service /tmp disk consumption by uploading a large number of files...

CVE-2014-9465

CVE-2014-9465 affects Zarafa WebApp (before 2.0 beta 3) and Zarafa WebAccess in Zarafa Collaboration Platform (ZCP) 7.x (before 7.1.12 beta 1 and 7.2.x before 7.2.0 beta 1). The issue allows remote attackers to cause a denial of service by uploading a large number of files, leading to /tmp disk c...

Multiple Denial of Service Vulnerabilities in Zarafa WebAccess and WebApp

Zarafa is a commercial collaborative software solution that provides email and webmail services, address book, calendar, notes, tasks and more. Multiple denial-of-service vulnerabilities exist in Zarafa WebAccess and WebApp, which could allow an attacker to crash the affected application, resulti...

MiniBB 3.1 - Blind SQL Injection

MiniBB 3.1 - Blind SQL Injection Exploit Title: miniBB 3.1 Blind SQL Injection Date: 23-11-2014 Software Link: http://www.minibb.com/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-9254 Category: webapps 1. Description...

Zarafa WebApp Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

FlatNuke 3.1.x Cross Site Scripting

------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------...