Tycoon CMS Record Script 1.0.9 - SQL Injection Vulnerability

No description provided by source. % TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | / | | | | | / | 0 //|| |||...

Lasernet CMS 1.5 - SQL Injection Vulnerability

No description provided by source. Title : LASERnet CMS Vulnerable to SQL Injection Vendor : http://lasernet.gr/cms.php Dork : intext:Powered by Lasernet Category: WebApps http://localhost.com/index.php?id=SQL Demo: http://localhost.com/index.php ?id=-1' UNION SELECT...

tsmim Lessons Library (show.php) SQL Injection

No description provided by source. =================================================================================== tsmim lessons library sql injection Vulnerabilities =================================================================================== Exploit Title: tsmim lessons library sql...

Elite Gaming Ladders 3.6 - SQL Injection Vulnerability

No description provided by source. Exploit Title: Elite Gaming Ladders v3.6 SQL Injection Vulnerability Date: 05/09/2011 Author: J.O Contact: [email protected] Website: http://www.m-h-a.org From : Morocco ---------------------------------------- Elite Gaming Ladders v3.6 SQL Injection Exploit...

Joomla Component BF Quiz SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component BF Quiz SQL Injection Vulnerability Date: 29th May 2010 Author: Valentin Category: webapps/0day Version: 1.3.0 Tested on: Debian, Apache2, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

QualDev eCommerce script SQL Injection Vulnerability

No description provided by source. ==================================================== QualDev eCommerce script SQL injection vulnerability ==================================================== Exploit Title: QualDev eCommerce script SQL injection vulnerability Vendor: http://www.qualdev.com Date...

Joomla component cinema SQL injection Vulnerability

No description provided by source. ========================================================= Exploit Title: joomla component cinema SQL injection Vulnerability Date: 09 juny 2010 Author: Suddendeath [email protected] Software Link: N/A Tested on: Windows XP 2 Platform / Tested on: Windows ...

openSUSE Security Update : tomcat6 (openSUSE-SU-2012:0103-1)

The apache tomcat was vulnerable to a hash collision attack which allowed remote attackers to mount DoS attacks. CVE-2011-4858 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...

Pulse gallery SQL Injection Vulnerability

Exploit for php platform in category web applications Author: kj-fido Date: 5/14/2014 Vendor Homepage: http://pulse.bg/ Vulnerability Type: SQL Injection Vulnerability Infected File: gallery.php Category: webapps Google dork:intext:"PULSE Design" /gallery.php?pageNumGalleryAll Tested on : Windows...

Qe 4.1.6 Cross Site Scripting

Exploit Title: Qe 4.1.6 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://c97.net Version : 4.1.6 Tested on: Windows Category: webapps Google Dork: Open your eyeZ + Exploit : http:///qe4.1.6/install/install.php URL encoded GET input cmd was set to : "alert/xss/ The...

No-CMS 0.6.6 Cross Site Scripting

Exploit Title: No-CMS 0.6.6 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://getnocms.com Version : 0.6.6 Tested on: Windows Category: webapps Google Dork: intext:"Powered by No-CMS" + Exploit : http:///No-CMS-master/No-CMS-master/index.php/installer/install URL...

PhpSiteManager 1.1.1 Cross Site Scripting

Exploit Title: PhpSiteManager 1.1.1 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bakari Download : http://filewatcher.com/m/phpSMv1.1.2.tgz.338496-0.html Version : 1.1.1 Tested on: Windows Category: webapps Google Dork: intext:"Powered ...

x7chat 3.2 Cross Site Scripting

Exploit Title: x7chat 3.2 Cross-Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://www.x7chat.com Version : 3.2 Tested on: Windows Category: webapps Google Dork: intext:"Powered By X7 Chat" + Exploit : http:///x7chat/ This vulnerability affects /x7chat/. Discovered by:...

Chat2 Cross Site Scripting / SQL Injection

Exploit Title: Chat2 Blind SQL Injection Chat2 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Tested on: Windows Category: webapps Google Dork: inurl:"/chatrooms.php" + Exploit SQL: http:///Chat2/jumpin.php URL encoded POST input userid was set to :...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

MeiuPic 2.1.2 Local File Inclusion

Exploit Title: MeiuPic 2.1.2 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://meiupic.meiu.cn Version : 2.1.2 Tested on: Windows Category: webapps Google Dork: intext:"Powerd by MeiuPic 2.1.2" + Exploit : http:///MeiuPic/ Local File Inclusion , you can read...

GuppY 4.6.26 XSS / CRLF Injection

Exploit Title: GuppY 4.6.26 CRLF Injection GuppY 4.6.26 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://freeguppy.org Version : 4.6.26 Tested on: Windows Category: webapps Google Dork: intext:"Powered by GUPPY" + Exploit CRLF:...

Ocportal 9.0.11 Cross Site Scripting / Local File Inclusion

Exploit Title: Ocportal 9.0.11 Cross site scripting Ocportal 9.0.11 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://ocportal.com Version : 9.0.11 Tested on: Windows Category: webapps Google Dork: intext:"Powered by ocportal" + Exploit XSS :...

Bigace 2.7.5 LFI / XSS / SQL Injection

Exploit Title: Bigace 2.7.5 Blind Sql Injection Bigace 2.7.5 Cross site scripting Bigace 2.7.5 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bigace/files/bigace2.7.5.zip Version : 2.7.5 Tested on: Windows Category: webapps Google Dork:...

Square 0.3.1 Cross Site Scripting

Exploit Title: Square 0.3.1 XSS Vulnerability Date: 2014 17 March Author: Dr.3v1l Vendor Homepage: http://readmoresystems.com Version : 0.3.1 Tested on: Windows Category: webapps Google Dork: inurl:"/?s=" + Exploit : http:///square.0.3.1/0.3.1/?s=XSS&submit=Submit&cmd=search + Demo : You can find...