Joomla Guru Pro SQL Injection

Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189 Category: webapps Version: All Tested...

Joomla! Component Guru Pro - Itemid SQL Injection

Joomla! Component Guru Pro - Itemid SQL Injection Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link:...

Joomla Guru Pro Component (com_guru) - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link:...

Joomla! Component Guru Pro - 'Itemid' SQL Injection

Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189 Category: webapps Version: All Tested...

WordPress Lazy Content Slider 3.4 Cross Site Request Forgery

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...

Joomla Topics 1.5.12 SQL Injection

Exploit Title : Joomla comtopics SQL injection Exploit Author : xBADGIRL21 Dork : inurl:index.php?option=comtopics Category: Webapps version: 1.5.12 Tested on: Windows skype:xbadgirl21 Date: 2016/07/08 video Proof Youtube : https://youtu.be/2KynoDHvEkY SQL injection PoC: cid= Get Parameter...

WordPress Lazy Content Slider 3.4 Plugin - Cross-Site Request Forgery (Add Catetory)

Exploit for php platform in category web applications Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4...

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery Add Catetory Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps...

WordPress Plugin Lazy Content Slider 3.4 - Cross-Site Request Forgery (Add Catetory)

Exploit Title : WordPress Lazy content Slider Plugin - CSRF Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/support/view/plugin-reviews/lazy-content-slider Category: Webapps Tested on: Win Version: 3.4 Date: 2016/07/08 PoC: The vulnerable page is...

Simpla Admin 1.02 Shell Upload / SQL Injection

Exploit Title : Simpla Admin Single-adsID SQL Injection / Shell Upload Exploit Author : xBADGIRL21 Dork : intext:connexion "single-ads.php?ID=" or inurl:.single-ads.php?ID= Software link : https://themeforest.net/item/simpla-admin-flexible-user-friendly-admin-skin/46073 Category: Webapps Tested o...

Parishcouncil CMS SAS4.5 Cross Site Scripting

Exploit Title : Parishcouncil CMS SAS4.5 / Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.parishcouncilwebsites.com/updating.php Category: Webapps Tested on: Win Version: SAS4.5 Date: 2016/06/21 PoC: yr Get Parameter Vulnerable To XSS Payload : ' Demo :...

Joomla! Component com_publisher - SQL Injection

Joomla! Component compublisher - SQL Injection Exploit Title: Joomla compublisher component SQL Injection vulnerability Exploit Author: s0nk3y Date: 21-06-2016 Software Link: http://extensions.joomla.org/extension/publisher-pro Category: webapps Version: All Tested on: Ubuntu 16.04 1. Description...

Joomla Publisher Pro Component (com_publisher) - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla compublisher component SQL Injection vulnerability Exploit Author: s0nk3y Date: 21-06-2016 Software Link: http://extensions.joomla.org/extension/publisher-pro Category: webapps Version: All Tested on: Ubuntu 16.04 1...

Joomla! Component com_publisher - SQL Injection

Exploit Title: Joomla compublisher component SQL Injection vulnerability Exploit Author: s0nk3y Date: 21-06-2016 Software Link: http://extensions.joomla.org/extension/publisher-pro Category: webapps Version: All Tested on: Ubuntu 16.04 1. Description Publisher Pro is the ultimate publishing...

Joomla BT Media 1.0 SQL Injection

Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Parameter Vulnerable To SQL Demo :...

CMS Elevel 1.0 Cross Site Scripting / SQL Injection

Exploit Title : CMS Elevel 1.0 - SQL Injection / XSS Exploit Author : Persian Hack Team Vendor Homepage : http://www.elevel.it/privacy.php Google Dork : "Web Design by Elevel" inurl:news.php Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: id Parameter Vulnerable To SQL / XSS...

Joomla BT Media Component (com_bt_media) - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0=...

Joomla! Component com_bt_media 1.0 - SQL Injection

Joomla! Component combtmedia 1.0 - SQL Injection Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Paramete...

Joomla! Component com_bt_media 1.0 - SQL Injection

Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Parameter Vulnerable To SQL Demo :...

WordPress Gravity Forms 1.8.19 Shell Upload

&formid=1&name=khan.php5&gformuniqueid=../../../../&fieldid=3'; curlsetopt$ch, CURLOPTRETURNTRANSFER, true; $response = curlexec$ch; curlclose$ch; if eregi'ok', $response echo "$separator\nShell at $shell\n$separator\n\n"; while $testCom != 'bubye!' $user =...