ATutor 2.2.2 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana Kuma...

ATutor 2.2.2 - Cross-Site Request Forgery (Add New Course)

ATutor 2.2.2 - Cross-Site Request Forgery Add New Course Exploit Title: ATutor2.2.2 Learning Management System Cross-Site Request Forgery Add New Course Date: 13-11-2016 Software Link: https://github.com/atutor/ATutor/releases/tag/atutor222 Vendor: http://www.atutor.ca/ Exploit Author: Saravana...

WordPress Plugin BBS e-Franchise 1.1.1 - SQL Injection

Exploit Title: BBS e-Franchise 1.1.1 Plugin of WordPress – Sql Injection Date: 12/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/bbs-e-franchise/ Software Link: https://wordpress.org/plugins/bbs-e-franchise/ Contact: http://twitter.com/lenonleite Website:...

WordPress Plugin Product Catalog 8 1.2.0 - SQL Injection

Exploit Title: Product Catalog 8 1.2 Plugin WordPress – Sql Injection Date: 12/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/product-catalog-8/ Software Link: https://wordpress.org/plugins/product-catalog-8/ Contact: http://twitter.com/lenonleite Website:...

e107 CMS 2.1.2 Privilege Escalation Vulnerability

Exploit for php platform in category web applications Exploit Title: e107 CMS 2.1.2 Privilege Escalation Date: 09-11-2016 Software Link: http://e107.org/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description Dat...

NodCMS Cross Site Scripting

Exploit Title : nodcms cross site scripting Author : Ashiyane Digital Security Team Date : 29/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.nodcms.com/en Software link : https://github.com/khodakhah/nodcms/archive/master.zip version : All version Path Of Vulnerability :...

sNews CMS 1.7 Cross Site Request Forgery

Exploit Title : Snews CMS Cross Site Request Forgery Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link : http://snewscms.com/download/snews1.7.1.zip Version :...

sNews 1.7.1 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title : Snews CMS Cross Site Request Forgery Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link :...

ETchat 3.7 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows...

Redaxo 5.2.0 - Cross-Site Request Forgery Vulnerability

Exploit for php platform in category web applications Exploit Title : redaxo CMS CSRFAdd Admin Author : Ashiyane Digital Security Team Google Dork : intitle:Login · REDAXO Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.redaxo.org/ Software link...

Redaxo 5.2.0 - Cross-Site Request Forgery

Redaxo 5.2.0 - Cross-Site Request Forgery Exploit Title : redaxo CMS CSRFAdd Admin Author : Ashiyane Digital Security Team Google Dork : intitle:Login · REDAXO Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.redaxo.org/ Software link...

sNews 1.7.1 - Arbitrary File Upload

sNews 1.7.1 - Arbitrary File Upload Exploit Title : Snews CMS upload sheller Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 04/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link :...

sNews 1.7.1 - Cross-Site Request Forgery

sNews 1.7.1 - Cross-Site Request Forgery Exploit Title : Snews CMS Cross Site Request Forgery Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link :...

ETchat 3.7 - Cross-Site Request Forgery

Exploit Title: ETchatpersian version CMS Xsrf vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software Link: http://dl.20script.ir/script/chat/et-chat-3.7-Persianwww.20script.ir.zip Tested on: Windows 7 / Kali Linux Category: WebApps Dork : User Your Min...

sNews 1.7.1 - Arbitrary File Upload

Exploit Title : Snews CMS upload sheller Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 04/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link : http://snewscms.com/download/snews1.7.1.zip Version : 1.7latest 3...

sNews 1.7.1 - Cross-Site Request Forgery

Exploit Title : Snews CMS Cross Site Request Forgery Author : Ashiyane Digital Security Team Google Dork : "This site is powered by sNews" Date : 1/11/2016 Type : webapps Platform : PHP Vendor Homepage : http://snewscms.com/ Software link : http://snewscms.com/download/snews1.7.1.zip Version :...

PizzaInn Beta 3 categories-exec.php Cross Site Request Forgery

Exploit Title :----------------- : PizzaInn Restaurant Scripti Beta v3 - categories-exec.php - CSRF Add Category Author :------------------------ : Nassim Asrir Author Company :------------------------ : HenceForth Author Email :------------------------ : [email protected] Google Dork...

XhP CMS 0.5.1 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor: https://sourceforge.net/projects/xhp/ Google Dork: inurl:Powered by XHP CMS Contact:...

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting

XhP CMS 0.5.1 - Cross-Site Request Forgery Persistent Cross-Site Scripting Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor:...

XhP CMS 0.5.1 - Cross-Site Request Forgery / Persistent Cross-Site Scripting

Exploit Title: XhP CMS 0.5.1 - Cross-Site Request Forgery to Persistent Cross-Site Scripting Exploit Author: Ahsan Tahir Date: 19-10-2016 Software Link: https://sourceforge.net/projects/xhp/ Vendor: https://sourceforge.net/projects/xhp/ Google Dork: inurl:Powered by XHP CMS Contact:...