RedAxScript v1.1 <= Multiple Blind SQL Injection Vulnerabilities

RedAxScript suffer from multiple SQL Injection Usage Info POST Inject via HTTP headers attack's or HTTP debugger, HackBar / or use any toolkit like sqlmap, sql-ninja etc.. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

WordPress Blooog 1.1 jplayer.swf Cross Site Scripting

X-------------------------------------------------------------X | | | | | \ | | / | |/ \ | \ | | / \ \ / / \ | \ | | | | | | | | | | \ --. | | / /\ | | | | / /\ V /| |/ / | | |/ / | | | | | | . | | | --. \ | | | || . | | | \ / | \ || / | | | || | |\ || |// /| || | | || |\ | | /\ | | | |/ /...

GILE WebDesign SQL Injection Vulnerability

Exploit for php platform in category web applications X-------------------------------------------------------------X | | | | | \ | | / | |/ \ | \ | | / \ \ / / \ | \ | | | | | | | | | | \ --. | | / /\ | | | | / /\ V /| |/ / | | |/ / | | | | | | . | | | --. \ | | | || . | | | \ / | \ || / | | |...

Cisco 9900 Series Phone webapp Buffer Overflow Vulnerability

A vulnerability in the web application interface of Cisco 9900 series IP phones could allow an unauthenticated, remote attacker to cause the webapp interface to become unavailable. The vulnerability is due to insufficient input validation of certain fields. An attacker could exploit this...

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution

IBM 1754 GCM 1.18.0.22011 - Remote Command Execution I. Product description The IBM 1754 GCM family provides KVM over IP and serial console management technology in a single appliance. II. Vulnerability information Impact: Command execution Remotely exploitable: yes CVE: 2013-0526 CVS Score: 8.5...

OmegaBB 0.9.3 CSRF / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

GroundWork Monitor Enterprise Foundation Webapp Admin Arbitrary File Access

The remote host has a version of GroundWork Monitor Enterprise installed that has an arbitrary file access vulnerability in the Foundation Webapp Admin interface. By sending a specially crafted HTTP request, it is possible for a remote attacker to read or modify files the nagios user has access t...

Matterdaddy Market 1.4.2 CSRF / Arbitrary File Upload

Matterdaddy Market version 1.4.2 and below suffers from cross site request forgery and arbitrary file upload vulnerabilities. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit...

CVE-2013-3500

The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script...

CVE-2013-3500

The Foundation webapp admin interface in GroundWork Monitor Enterprise 6.7.0 uses the nagios account as the owner of writable files under /usr/local/groundwork, which allows context-dependent attackers to bypass intended filesystem restrictions by leveraging access to a GroundWork script...

CVE-2013-3500

The CVE-2013-3500 entry affects GroundWork Monitor Enterprise 6.7.0: the Foundation webapp Admin interface leaves writable files under /usr/local/groundwork owned by the nagios user, enabling context-dependent attackers to bypass filesystem restrictions by leveraging access to a GroundWork script...

McAfee Vulnerability Manager Detect

McAfee Vulnerability Manager, a web-based vulnerability manager, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65737; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT"...

PHPBoost 4.0 <= (FileUpload/Disclosure) Multiple Vulnerabilities

PHPBoost 4.0 Multiple Vulnerabilities - Remote File Upload - Full Informations Disclosure 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type...

0101SHOP CMS SQL Injection

.:: In The Name Of God ::. 0101SHOP CMS SQL Injection Vulnerability Security Risk : High Discovered By IRaNHaCK Security Team MR.XpR Our WebSite : IRaNHaCK.ORG Tested On : XP , 7 , BackTrack Date : 2013-02-16 Version : All Category : WebApp...

Joomla GarysCookBook 3.0.x Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp...

Calendar Script Easy Membership Management Application Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory:Calendar Script Easy Membership Management ApplicationE.M.M.A Persistent XSS Vulnerability Version:1.2 Vendor URL: http://calendarscripts.info/emma/ Demo Link: http://demo.pimteam.net/emma/admin.php Author: Viknesvaran Sittaramane...

Allembru Ad Manager 3.0.2 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory: Allembru Ad Manager 3.0.2 Persistent XSS Vulnerability Version:3.0.2 Vendor URL: http://www.allembru.com/ Demo Link:http://www.allembru.com/wp-content/demos/ad-manager-v3/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter:...

Calendar Scripts A.M.Y 1.4 Cross Site Scripting

Advisory:Calendar Scripts A.M.Y. Ad Management Software 1.4 Persistent XSS Vulnerability Version:1.4 Vendor URL: http://calendarscripts.info/ Demo Link:http://demo.pimteam.net/amy/admin.php Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn ........... Product...

Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability

Exploit for php platform in category web applications Advisory: Ad Rotator AdPeeps 8.6.9 Persistent XSS Vulnerability Version:8.6.9 Vendor URL: http://adpeeps.com/ Demo Link:http://demo.adpeeps.com/ Author: Viknesvaran Sittaramane Category: Webapp Twiiter: https://twitter.com/csvsn...