WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (1st)

No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r G r o u n D H a c k i n g T e a m Remote C0mmand Executing Expl0it - For WebAPP CGI Exploit By : A l p h a P r o g r a m m e r Sirus-v ; E-Mail : [email protected] [email protected] This xpl Open a Backdoor in...

ASPSiteware Recipe Organizer SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Recipe Organizer SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

ASPSiteware Contact Directory 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware Contact Directory SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:40$ Contact: [email protected] Website: www.1337db.com Greetings to:...

MangosWeb SQL Injection Vulnerability

No description provided by source. EXPLOIT TITLE: MangosWeb SQL Vulnerability DATE: 1/7/2012 BY Hood3dRob1n AFFECTED PRODUCTS: MangosWeb Enhanced Version 3.0.3 SW LINK: http://code.google.com/p/mwenhanced/ CATEGORY: WebApp 0day DORK: intext:MangosWeb ENhanced Version 3.0.3 @2009-2011, KeysWow Dev...

Web-APP.Org WebAPP 0.8/0.9.x Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11028/info WebAPP is reported prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input data. An attacker can exploit this vulnerability to retrieve arbitrary,...

SmarterMail Enterprise and Standard <=11.x - Stored XSS

No description provided by source. ?php / Exploit Title: SmarterMail Enterprise and Standard =11.x Stored XSS Google Dork: intext:SmarterTools Inc. inurl:login.aspx Date: 15 Jan 2014 Exploit Author: Saeed reza Zamanian s.zamanian AT imenantivirus.com Vendor Homepage: http://www.smartertools.com/...

Gentoo Webapp-Config 1.10 Insecure File Creation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13780/info Gentoo webapp-config is prone to an insecure file creation vulnerability. This issue is due to a design error that causes the application to fail to verify the existence of a file before writing to it. An...

T-dreams Announcement Script SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: T-dreams Announcement Script SQL injection Vulnerable Date: 21-08-2010 Author: Br0wn Sug4r Software Link: http://www.t-dreams.com/download/announce.zip Version: n/a Tested on...

ASPSiteware JobPost 1.0 - SQL Injection

No description provided by source. Author: R4dc0re Exploit Title: ASPSiteware JobPost SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:40$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com,...

LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...

plx Ad Trader 3.2 Authentication Bypass Vulnerability

No description provided by source. Vendor or Software Link: http://www.plxwebdev.com/script/adtrader/ Category:WebApp Version: 3.2 Price: 60 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members Submit Yo...

PHP Web Scripts Ad Manager Pro 3.0 - SQL Injection

No description provided by source. Vendor or Software Link: http://www.phpwebscripts.com/admanagerpro/ Category:WebApp Version: 3 Price: $99/$130/$325 USD Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members...

Yes Solutions - Webapp SQL Injection

No description provided by source. .:. Author : HackXBack [email protected] Lebanese Hacker .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : YES SOLUTIONS http://www.yessolutions.biz/files/index.php .:. Bug Type : Sql Injection .:. Dork : Powered by: Yes Solutions === Exploit ==...

Pulse Pro 1.4.3 Persistent XSS Vulnerability

No description provided by source. Exploit Title: Pulse Pro 1.4.3 Persistent XSS Vulnerability Date: 24-10-2010 Author: Th3 RDX Software Link: http://pulsecms.com/ Version: 1.4.3 Tested on: Demo Site category: webapp Code : n/a...

Joomla Component com_zina SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component comzina SQL Injection Vulnerability Date: 21-08-2010 Author: Th3 RDX Software Link:http://www.pancake.org/zina/ Version: 2.x Tested on: Demo Site category: webapp Code : n/a...

jetty 6.x - 7.x xss, information disclosure, injection

No description provided by source. Jetty 6.x and 7.x Multiple Vulnerabilities Name Multiple Vulnerabilities in Jetty Systems Affected Jetty 7.0.0 and earlier versions Severity Medium Impact CVSSv2 Medium 5/10, vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Vendor http://www.mortbay.org/jetty/ Advisory...

Escort Agency CMS Blind SQL Injection Vunerability

No description provided by source. Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability Google Dork: "Powered by Escort agency CMS - Escort agency webdesign" Platform: php, webapp Date: 10.02.2011 Author: NoNameMT Software Link:...

WebAPP 0.9.9.2.1 - Remote Command Execution Exploit (2nd updated)

No description provided by source. ?php WebAPP v0.9.9.2.1 Remote Command Execution Exploit Code by Nikyt0x [email protected] Advisory: www.defacers.com.mx/advisories/3.txt Saludos: Soulblack Staff, Status-x, NeosecurityTeam, KingMetal, Trespasser... sbwebapp.php www.host.com /dirto/apage.cgi...

Ecommercemax Solutions Digital Goods Seller SQL Injection

No description provided by source. Author: R4dc0re Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://www.ecommercemax.com/ Category:WebApp Version:1.5 Price:60$ Contact: [email protected] Website: www.1337db.com...

Setiran CMS Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Setiran CMS Blind SQL injection Vulnerable Date: 1-07-2010 Author: Th3 RDX Software Link: Version: n/a Tested on: Demo Site category: webapp Code : n/a...