Smart Chat 1.0.0 - SQL Injection

Exploit Title: Smart Chat - PHP Script 1.0.0 - Authentication Bypass Dork: N/A Date: 28.08.2017 Vendor Homepage: http://codesgit.com/ Software Link: https://www.codester.com/items/997/smart-chat-php-script Demo: http://demos.codesgit.com/smartchat/ Version: 1.0.0 Category: Webapps Tested on:...

Easy Web Search 4.0 - SQL Injection

Exploit Title: Easy Web Search 4.0 - SQL Injection Dork: N/A Date: 28.08.2017 Vendor Homepage: http://nelliwinne.net/ Software Link: https://codecanyon.net/item/easy-web-search-php-search-engine-with-image-search-and-crawling-system/17574164 Demo: http://codecanyon.nelliwinne.net/EasyWebSearch/...

Joomla Bargain Product VM3 1.0 Component - product_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Bargain Product VM3 1.0 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link: https://www.weborange.eu/extensions/index.php/extensions-vm3/bargain-product-vm3-deta...

Joomla Price Alert 3.0.2 Component - product_id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Price Alert 3.0.2 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link:...

Joomla MasterForms 1.0.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component MasterForms 1.0.3 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://masterformsbuilder.com/ Software Link: https://www.joomlamasterforms.com/download?file=masterformsv.1.0.3j3.3.zip Demo:...

Joomla! Component Responsive Portfolio 1.6.1 - SQL Injection

Joomla! Component Responsive Portfolio 1.6.1 - SQL Injection Exploit Title: Joomla! Component RPC - Responsive Portfolio 1.6.1 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://extro.media/ Software Link: https://extensions.joomla.org/extension/rpc-responsive-portfolio/ Demo:...

Joomla! Component OSDownloads 1.7.4 - SQL Injection

Joomla! Component OSDownloads 1.7.4 - SQL Injection Exploit Title: Joomla! Component OSDownloads 1.7.4 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://joomlashack.com/ Software Link:...

Joomla! Component OSDownloads 1.7.4 - SQL Injection

Exploit Title: Joomla! Component OSDownloads 1.7.4 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://joomlashack.com/ Software Link: https://extensions.joomla.org/extensions/extension/directory-a-documentation/downloads/osdownloads/ Demo:...

Joomla! Component Photo Contest 1.0.2 - SQL Injection

Exploit Title: Joomla! Component Photo Contest 1.0.2- SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: http://keenitsolution.com/ Software Link: https://codecanyon.net/item/photo-contest-joomla-extension/13268866 Demo: http://photo.keenitsolution.com/ Version: 1.0.2 Category: Webapps...

Joomla! Component Bargain Product VM3 1.0 - product_id SQL Injection

Joomla! Component Bargain Product VM3 1.0 - productid SQL Injection Exploit Title: Joomla! Component Bargain Product VM3 1.0 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link:...

Joomla! Component Price Alert 3.0.2 - product_id SQL Injection

Joomla! Component Price Alert 3.0.2 - productid SQL Injection Exploit Title: Joomla! Component Price Alert 3.0.2 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link:...

Joomla! Component MasterForms 1.0.3 - SQL Injection

Joomla! Component MasterForms 1.0.3 - SQL Injection. Webapps exploit for PHP platform...

Joomla! Component Bargain Product VM3 1.0 - 'product_id' SQL Injection

Exploit Title: Joomla! Component Bargain Product VM3 1.0 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link: https://www.weborange.eu/extensions/index.php/extensions-vm3/bargain-product-vm3-detail Demo:...

Joomla! Component Price Alert 3.0.2 - 'product_id' SQL Injection

Exploit Title: Joomla! Component Price Alert 3.0.2 - SQL Injection Dork: N/A Date: 25.08.2017 Vendor Homepage: https://www.weborange.eu/ Software Link: https://extensions.joomla.org/extensions/extension/extension-specific/virtuemart-extensions/price-alert/ Demo:...

Matrimonial Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Matrimonial Script - SQL Injection Dork: N/A Date: 22.08.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.mscript.in/ Demo: http://www.mscript.in/matrimonial-demo.html Version: N/A Category: Webapps Tested...

Wireless Repeater BE126 - Local File Inclusion

Wireless Repeater BE126 - Local File Inclusion Exploit Title: WIFI Repeater BE126 – Local File Inclusion Date Publish: 23/08/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Tested...

Matrimonial Script - SQL Injection

Matrimonial Script - SQL Injection Exploit Title: Matrimonial Script - SQL Injection Dork: N/A Date: 22.08.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.mscript.in/ Demo: http://www.mscript.in/matrimonial-demo.html Version: N/A Category: Webapps Tested on:...

Bitcoin / Dogecoin Mining 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bitcoin,Dogecoin Mining 1.0 - Authentication Bypass Dork: N/A Date: 21.08.2017 Vendor Homepage: https://codecanyon.net/user/bousague Software Link: https://codecanyon.net/item/bitcoindogecoin-mining-php-script/20315581 Demo:...

Joomla Sponsor Wall 8.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Sponsor Wall 8.0 - SQL Injection Dork: N/A Date: 21.08.2017 Vendor Homepage: http://pulseextensions.com/ Software Link: https://extensions.joomla.org/extensions/extension/ads-a-affiliates/sponsors/sponsor-wall/...

Matrimonial Script - SQL Injection

Exploit Title: Matrimonial Script - SQL Injection Dork: N/A Date: 22.08.2017 Vendor Homepage: http://www.scubez.net/ Software Link: http://www.mscript.in/ Demo: http://www.mscript.in/matrimonial-demo.html Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit Author: Ihsa...