PHP-X-Links SQL Injection

Exploit Title: Php-X-Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by Php-X-Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows...

WSN Links Script SQL Injection

Exploit Title: WSN Links Script SQL Injection Vulnerabilitiy Google Dork: "Powered by WSN Links" Date: 1/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: http://scripts.webmastersite.net/wsnlinks Version: All Version Category:: webapps Securi...

wsCMS Cross Site Scripting / SQL Injection

Exploit Title: wsCMS alert/farbodmahini/ www.wbnb-fanb.ca/search.php?search=alert/farbodmahini/ www.gowanbrae.ca/search.php?search=alert/farbodmahini/ Special Thanks : Mehdi.H4ckcity-2MzRp-Mikili-M.Prince-Bl4ck.Viper-iC0d3R- IrIsT-K0242-P0W3RFU7-Mr.M4st3r-HigherSense ,... GreetZ : All H4ckCity...

Siena CMS 1.242 Cross Site Scripting

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Siena CMS 1.242 alert0 Demo : http://www.sienacms.com/index.php?page="alert0 Demo :...

Grebweb CMS Cross Site Scripting / SQL Injection

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG ---------------------------------------------------------------- Grebweb Cms alert0 PoC 2 Enter In Search Box XSS Code PoC : http://localhost/index.php Demo : http://www.yagyashree.com/index.php...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation on the input of the name variable. This allows maliciou...

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting

Winn Guestbook 2.4.8c - Persistent Cross-Site Scripting Exploit Title: Winn Guestbook v2.4.8c Stored XSS Date: 12/29/11 Author: G13 Software Link: http://code.google.com/p/winn-guestbook/, http://www.winn.ws Version: 2.4.8c Category: webapps php CVE: 2011-5026 Vulnerability There is no sanitation...

SASHA v0.2.0 Mutiple XSS

Exploit Title: SASHA v0.2.0 Mutiple XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/sasha/files/ Version: 0.2.0 Category: webapps php Vulnerability When adding a new course to the schedule, the application relies on Client Side controls for input. This can easily be...

PHP Booking Calendar 10e XSS

Exploit Title: PHP Booking Calendar 10e XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/bookingcalendar/ Version: 10e Category: webapps php Vulnerability The pageinfomessage varibale in the detailsview.php does not sanitize input. This is a relective XSS attack...

Inet Revolution SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Exploit Title: Inet Revolution http://gyankalash.com/pages.php?q=14' - http://stvishnaschool.com/pages.php?q=4' - http://concordsecurity.org/service.php?id=4' - Admin Pag...

Gold Coast Web Design SQL Injection

Title: Gold Coast Web Design SQL Injection Author: AngelParrot Date: 2011/12/19 Category: Webapps Vendor: http://goldcoastwebdesign.com/ Google Dork: inurl:php?id= intext:"web site by: goldcoastwebdesign.com" Exploit http://example.com/news.php?MenuID=SQL...

PHP Booking Calendar 10e Cross Site Scripting

Exploit Title: PHP Booking Calendar 10e XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/bookingcalendar/ Version: 10e Category: webapps php Vulnerability The pageinfomessage varibale in the detailsview.php does not sanitize input. This is a relective XSS attack...

FCMS 2.7.2 Cross Site Request Forgery

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

FCMS_2.7.2 cms and earlier multiple stored XSS Vulnerability

Exploit for php platform in category web applications FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities

FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities FCMS2.7.2 cms and earlier multiple CSRF Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple CSRF Vulnerability Download link...

FCMS 2.7.2 Cross Site Scripting

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities

FCMS2.7.2 cms and earlier multiple stored XSS Vulnerability =================================================================================== Exploit Title: FCMS2.7.2 cms multiple stored XSS Vulnerability Download link...

Vietsunit Script <= (index.php) Local File Include Vulnerability

Exploit for php platform in category web applications ---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not...