Joomla En-Masse 6.4 SQL Injection

Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...

Joomla! Component com_enmasse 5.1 6.4 - SQL Injection

Joomla! Component comenmasse 5.1 6.4 - SQL Injection Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15...

Joomla En Masse (com_enmasse) 5.1 < 6.4 Component - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15...

Joomla! Component com_enmasse 5.1 < 6.4 - SQL Injection

Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...

Joomla Catfiltering 1.5.4 SQL Injection

Exploit Title : Joomla comcatfiltering - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comcatfiltering Category: Webapps Tested on: Win Version: 1.5.4 Date: 2016/06/14 PoC: flt1= Get Parameter Vulnerable To SQL Demo :...

Joomla! Extension PayPlans (com_payplans) 3.3.6 - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla Affiliate 1.0.3 SQL Injection

Exploit Title : Joomla comaffiliate - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comaffiliate Category: Webapps Tested on: Win Version: 1.0.3 Date: 2016/06/13 PoC: --Bypass Authentication http://www.site.com/index.php?option=comaffiliate&view=login...

Joomla Affiliate Tracker 2.0.3 SQL Injection

Exploit Title : Joomla comaffiliatetracker - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/affiliate-tracker Category: Webapps Tested on: Win Version: 2.0.3 Date: 2016/06/13 PoC: First Login To Panel And Go To Affiliate Tracker userid...

Joomla Pay Plans 3.3.6 SQL Injection

Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter Vulnerable To SQL Demo :...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Joomla! Component compayplans 3.3.6 - SQL Injection Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter Vulnerable To SQL Demo :...

Joomla Maqma Helpdesk 4.2.3 Cross Site Scripting

Exploit Title : Joomla commaqmahelpdesk - XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/maqma-helpdesk Category: Webapps Tested on: Win Date: 2016/06/09 Version : 4.2.3 PoC: Add Your Tiket sometimes you must login First in Message Te...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

Joomla Joomdoc 4.0.3 Path Disclosure

Exploit Title : Joomla comjoomdoc - Full Path Disclosure Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/joomdoc Category: Webapps Tested on: Win Version: 4.0.3 Date: 2016/06/08 PoC: Full Path Disclosure FPD vulnerabilities enable the...

Joomla AvailCal 05 SQL Injection

Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...

WordPress Double Opt-In for Download 2.0.9 Plugin - SQL Injection

Exploit for php platform in category web applications Exploit Title: Double Opt-In for Download 2.0.9 Sql Injection Date: 06-06-2016 Software Link: https://wordpress.org/plugins/double-opt-in-for-download/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

Joomla Jumi 3.0.5 Cross Site Scripting

Exploit Title : Joomla Component comjumi - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/jumi Category: Webapps Tested on: Win Date: 2016/05/26 Version : 3.0.5 PoC: fileid vulnerable to XSS Payload = "PersianHack Team Demo :...

Tuninfoforyou 2 / 2.5 Backdoor Account

Exploit Title : Tuninfoforyou - Weak Password Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.tuninfoforyou.com/ Category: Webapps Tested on: Win Version: 2 And 2.5 Date: 2016/05/20 PoC: Login Page : /reservation/admin/ And /b2b/admin/ User and Password = admin Demo ...

WordPress Huge-IT Image Gallery 1.8.9 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/gallery-images/" Date: 12-05-2016 Software Link: https://fr.wordpress.org/plugins/gallery-images/ Version: 1.8.9 and...

WordPress Q&A (Focus Plus) FAQ Plugin 1.3.9.7 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress Q and A Focus Plus FAQ Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/q-and-a" Date: 12-05-2016 Software Link: https://wordpress.org/plugins/q-and-a-focus-plus-faq/ Version: 1.3.9.7 and...