Qe 4.1.6 Cross Site Scripting

Exploit Title: Qe 4.1.6 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://c97.net Version : 4.1.6 Tested on: Windows Category: webapps Google Dork: Open your eyeZ + Exploit : http:///qe4.1.6/install/install.php URL encoded GET input cmd was set to : "alert/xss/ The...

GuppY 4.6.26 XSS / CRLF Injection

Exploit Title: GuppY 4.6.26 CRLF Injection GuppY 4.6.26 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://freeguppy.org Version : 4.6.26 Tested on: Windows Category: webapps Google Dork: intext:"Powered by GUPPY" + Exploit CRLF:...

litepublisher 5.72 Cross Site Scripting

Exploit Title: litepublisher 5.72 SWFUpload movieName Cross Site Scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://litepublisher.com Version : 5.72 Tested on: Windows Category: webapps Google Dork: intext:"Powered by Lite Publisher" + Exploit :...

Ocportal 9.0.11 Cross Site Scripting / Local File Inclusion

Exploit Title: Ocportal 9.0.11 Cross site scripting Ocportal 9.0.11 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://ocportal.com Version : 9.0.11 Tested on: Windows Category: webapps Google Dork: intext:"Powered by ocportal" + Exploit XSS :...

MeiuPic 2.1.2 Local File Inclusion

Exploit Title: MeiuPic 2.1.2 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://meiupic.meiu.cn Version : 2.1.2 Tested on: Windows Category: webapps Google Dork: intext:"Powerd by MeiuPic 2.1.2" + Exploit : http:///MeiuPic/ Local File Inclusion , you can read...

Bigace 2.7.5 LFI / XSS / SQL Injection

Exploit Title: Bigace 2.7.5 Blind Sql Injection Bigace 2.7.5 Cross site scripting Bigace 2.7.5 Local File Inclusion Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bigace/files/bigace2.7.5.zip Version : 2.7.5 Tested on: Windows Category: webapps Google Dork:...

Chat2 Cross Site Scripting / SQL Injection

Exploit Title: Chat2 Blind SQL Injection Chat2 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Tested on: Windows Category: webapps Google Dork: inurl:"/chatrooms.php" + Exploit SQL: http:///Chat2/jumpin.php URL encoded POST input userid was set to :...

Square 0.3.1 Cross Site Scripting

Exploit Title: Square 0.3.1 XSS Vulnerability Date: 2014 17 March Author: Dr.3v1l Vendor Homepage: http://readmoresystems.com Version : 0.3.1 Tested on: Windows Category: webapps Google Dork: inurl:"/?s=" + Exploit : http:///square.0.3.1/0.3.1/?s=XSS&submit=Submit&cmd=search + Demo : You can find...

Wordpress EEMP plugin SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================================ +++++++++++++++++ ++ C L O U D X ++ +++++++++++++++++ ================================================================================ Exploit Title : Wordpress...

WordPress OptimizePress插件任意文件上传漏洞

WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 '/wp-content/themes/OptimizePress/lib/admin/media-upload.php'不正确校验用户提交的上传文件扩展，允许远程攻击者利用漏洞提交恶意文件，并以WEB权限执行。 0 WordPress OptimizePress Plugin 1.x 厂商补丁： WordPress ----- WordPress OptimizePress Plugin 1.6已经修复该漏洞，请到厂商的主页下载：...

WordPress dzs-videogallery Plugins Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress dzs-videogallery Plugins Remote File Upload Vulnerability Author: iskorpitx Date: 22/11/2013 Vendor Homepage: http://digitalzoomstudio.net Themes Link: http://digitalzoomstudio.net/docs/wpvideogallery/ Infected File:...

WordPress Plugin dzs-videogallery - Arbitrary File Upload

WordPress Plugin dzs-videogallery - Arbitrary File Upload Exploit Title: WordPress dzs-videogallery Plugins Remote File Upload Vulnerability Author: iskorpitx Date: 22/11/2013 Vendor Homepage: http://digitalzoomstudio.net Themes Link: http://digitalzoomstudio.net/docs/wpvideogallery/ Infected Fil...

WordPress Plugin dzs-videogallery - Arbitrary File Upload

Exploit Title: WordPress dzs-videogallery Plugins Remote File Upload Vulnerability Author: iskorpitx Date: 22/11/2013 Vendor Homepage: http://digitalzoomstudio.net Themes Link: http://digitalzoomstudio.net/docs/wpvideogallery/ Infected File: upload.php Category: webapps Google...

WordPress Project 10 Themes - Remote File Upload Vulnerability

Wordpress Project 10 Themes suffers from remote file upload vulnerability . . . \ \ | / \ \ \ | || / \ / / \ / |/ \ / | / \ / / /| | |/ \ \ \ // \ / / | \ /\ / | \ \ \ / \ //\ |\ | /\ // | /|\ / / / / / / / Exploit Title: WordPress Project 10 Themes - Remote File Upload...

WordPress reganto-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress reganto-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/reganto/ Infected File:...

WordPress oxygen-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress oxygen-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/oxygen/ Infected File:...

WordPress rayoflight-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress rayoflight-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/ray-of-light/ Infected File...

WordPress radial-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress radial-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/radial/ Infected File:...

WordPress bulteno-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress bulteno-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/bulteno/ Infected File:...

WordPress bordeaux-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress bordeaux-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/bordeaux/ Infected File:...