AMC Master - Arbitrary File Upload

Exploit Title: Annual Maintenance Contract Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/amc-master-annual-maintenance-contract-management-system/20667703 Demo:...

WordPress Plugin WPGYM - SQL Injection

WordPress Plugin WPGYM - SQL Injection Exploit Title: WPGYM - Wordpress Gym Management System - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/-wpgym-wordpress-gym-management-system/13352964 Demo:...

WordPress Plugin Hospital Management System - SQL Injection

WordPress Plugin Hospital Management System - SQL Injection Exploit Title: Hospital Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/hospital-management-system-for-wordpress/12094634 Demo:...

Photo Fusion - Arbitrary File Upload

Photo Fusion - Arbitrary File Upload Exploit Title: Photo Fusion - Free Stock Photos Script - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/photo-fusion-free-stock-photos-script/20115244 Demo:...

WordPress School Management System SQL Injection

Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/school/...

SMSmaster - SQL Injection

Exploit Title: SMSmaster – Multipurpose SMS Gateway for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/smsmaster-multipurpose-sms-gateway-for-wordpress/20605853 Demo:...

TicketPlus - Arbitrary File Upload

Exploit Title: TicketPlus - Support Ticket Management System - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/ticketplus-support-ticket-management-system/20221316 Demo: http://sportsgrand.com/demo/ticketplus/...

WordPress Plugin School Management System - SQL Injection

Exploit Title: School Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/school-management-system-for-wordpress/11470032 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/school/...

WordPress Plugin Hospital Management System - SQL Injection

Exploit Title: Hospital Management System for Wordpress - SQL Injection Dork: N/A Date: 26.09.2017 Vendor Homepage: http://mojoomla.com/ Software Link: https://codecanyon.net/item/hospital-management-system-for-wordpress/12094634 Demo: http://www.mobilewebs.net/mojoomla/extend/wordpress/hospital/...

Job Links - Arbitrary File Upload

Exploit Title: Job Links - Complete Job Management Script - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/job-links-complete-job-management-script/20672089 Demo: http://teamworktec.com/demo/job-links/ Version:...

Photo Fusion - Arbitrary File Upload

Exploit Title: Photo Fusion - Free Stock Photos Script - Arbitrary File Upload Dork: N/A Date: 26.09.2017 Vendor Homepage: http://teamworktec.com/ Software Link: https://codecanyon.net/item/photo-fusion-free-stock-photos-script/20115244 Demo: http://teamworktec.com/demo/photos-fusion/ Version: N/...

Multi Level Marketing - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Multi Level Marketing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/multi-level-marketing-script/ Demo:...

Cash Back Comparison Script 1.0 - SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: Cash Back Comparison Script 1.0 - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://cashbackcomparisonscript.com/ Software Link: http://cashbackcomparisonscript.com/demo/features/ Demo:...

Lending And Borrowing - pid Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Lending And Borrowing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/lending-borrowing-script/ Demo:...

Claydip Airbnb Clone 1.0 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Claydip Laravel Airbnb Clone 1.0 - Arbitrary File Upload Dork: N/A Date: 22.09.2017 Vendor Homepage: https://www.claydip.com/ Software Link: https://www.claydip.com/airbnb-clone.html Demo: https://www.claydip.com/airbnbdemo.html...

Lending And Borrowing - pid SQL Injection

Lending And Borrowing - pid SQL Injection Exploit Title: Lending And Borrowing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/lending-borrowing-script/ Demo: http://74.124.215.220/realfund/...

Stock Photo Selling 1.0 - SQL Injection

Stock Photo Selling 1.0 - SQL Injection !/usr/bin/perl -w Exploit Title: Stock Photo Selling Script 1.0 - SQL Injection Dork: N/A Date: 21.09.2017 Vendor Homepage: http://sixthlife.net/ Software Link: http://sixthlife.net/product/stock-photo-selling-website/ Demo: http://www.photoreels.com/...

Claydip Airbnb Clone 1.0 Arbitrary File Upload

Exploit Title: Claydip Laravel Airbnb Clone 1.0 - Arbitrary File Upload Dork: N/A Date: 22.09.2017 Vendor Homepage: https://www.claydip.com/ Software Link: https://www.claydip.com/airbnb-clone.html Demo: https://www.claydip.com/airbnbdemo.html Version: N/A Category: Webapps Tested on:...

Multi Level Marketing SQL Injection

Exploit Title: Multi Level Marketing Script - SQL Injection Dork: N/A Date: 22.09.2017 Vendor Homepage: http://www.i-netsolution.com/ Software Link: http://www.i-netsolution.com/product/multi-level-marketing-script/ Demo: http://74.124.215.220/advaemlm/ Version: N/A Category: Webapps Tested on:...

Stock Photo Selling 1.0 - SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl -w Exploit Title: Stock Photo Selling Script 1.0 - SQL Injection Dork: N/A Date: 21.09.2017 Vendor Homepage: http://sixthlife.net/ Software Link: http://sixthlife.net/product/stock-photo-selling-website/ Demo:...