ImageBay 1.0 - SQL Injection

ImageBay 1.0 - SQL Injection Exploit Title: ImageBay 1.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/imagebay-publish-or-share-photography-and-pictures/ Demo: http://imagebay.scriptfolder.com/ Version: 1.0...

Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Piwigo plugin User Tag , Persistent XSS Date: 10 Aug, 2017 Extension Version: 0.9.0 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=441 Exploit Author: Touhid M.Shai...

GIF Collection 2.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: GIF Collection 2.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/scriptfolder-gif-collection-2-0/ Demo: http://gif2.scriptfolder.com/ Version...

GIF Collection 2.0 - SQL Injection

GIF Collection 2.0 - SQL Injection Exploit Title: GIF Collection 2.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/scriptfolder-gif-collection-2-0/ Demo: http://gif2.scriptfolder.com/ Version: 2.0 Category:...

GIF Collection 2.0 - SQL Injection

Exploit Title: GIF Collection 2.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/scriptfolder-gif-collection-2-0/ Demo: http://gif2.scriptfolder.com/ Version: 2.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx6...

ImageBay 1.0 SQL Injection

Exploit Title: ImageBay 1.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/imagebay-publish-or-share-photography-and-pictures/ Demo: http://imagebay.scriptfolder.com/ Version: 1.0 Category: Webapps Tested on:...

Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting

Exploit Title: Piwigo plugin User Tag , Persistent XSS Date: 10 Aug, 2017 Extension Version: 0.9.0 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=441 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh22 Website:...

ImageBay 1.0 - SQL Injection

Exploit Title: ImageBay 1.0 - SQL Injection Dork: N/A Date: 10.08.2017 Vendor Homepage : http://www.scriptfolder.com/ Software Link: http://www.scriptfolder.com/imagebay-publish-or-share-photography-and-pictures/ Demo: http://imagebay.scriptfolder.com/ Version: 1.0 Category: Webapps Tested on:...

WordPress GamePlan Event And Gym Fitness Theme 1.5.13.2 Cross Site Scripting

Exploit Title: GamePlan Event and Gym Fitness WordPress Theme - Reflected XSS v1.0 - v1.5.13.2 Date: August 4, 2017 Software Link: https://www.cactusthemes.com/wp/gameplan/secondary Exploit Author: Kushal Jaisingh Contact: https://ca.linkedin.com/in/kushaljaisingh Category: WebApps, XSS 1...

WordPress Logosware Suite Uploader 1.1.6 Plugin Remote File Upload Vulnerability

Exploit for php platform in category web applications - Title : WordPress Plugin Logosware Suite Uploader 1.1.6 - Remote File Upload - Author : Shahab Shamsi - Vendor : https://wordpress.org/plugins/logosware-suite-uploader/ - Category : Webapps - Date : 30.July.2017 Vulnerable Source: 176:...

WordPress Logosware Suite Uploader 1.1.6 File Upload

Title : WordPress Plugin Logosware Suite Uploader 1.1.6 - Remote File Upload - Author : Shahab Shamsi - Vendor : https://wordpress.org/plugins/logosware-suite-uploader/ - Category : Webapps - Date : 30.July.2017 Vulnerable Source: 176: ifisuploadedfile$FILES'zip''tmpname' 207: moveuploadedfile...

NEC UNIVERGE UM4730 < 11.8 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: NEC UNIVERGE UM4730 11.8 SQL injection Vulnerbility: SQL injection login bypass Date: 15-12-2016 Exploit Author: b0x41s Author web: https://www.xrayit.nl Vendor Homepage: https://www.nec-enterprise.com Category: webapps Version:...

NEC UNIVERGE UM4730 11.8 - SQL Injection

NEC UNIVERGE UM4730 11.8 - SQL Injection Exploit Title: NEC UNIVERGE UM4730 11.8 SQL injection Vulnerbility: SQL injection login bypass Date: 15-12-2016 Exploit Author: b0x41s Author web: https://www.xrayit.nl Vendor Homepage: https://www.nec-enterprise.com Category: webapps Version: 11.6.0.31...

NEC UNIVERGE UM4730 < 11.8 - SQL Injection

Exploit Title: NEC UNIVERGE UM4730 11.8 SQL injection Vulnerbility: SQL injection login bypass Date: 15-12-2016 Exploit Author: b0x41s Author web: https://www.xrayit.nl Vendor Homepage: https://www.nec-enterprise.com Category: webapps Version: 11.6.0.31 Tested on: Windows server 2008 Description:...

NEC Universe UM4730 SQL Injection

Exploit Title: NEC UNIVERGE UM4730 11.8 SQL injection Vulnerbility: SQL injection login bypass Date: 15-12-2016 Exploit Author: b0x41s Author web: https://www.xrayit.nl Vendor Homepage: https://www.nec-enterprise.com Category: webapps Version: 11.6.0.31 Tested on: Windows server 2008 Description:...

WordPress Plugin Sabai Discuss - Cross-Site Scripting

Exploit Title: Sabai Discuss Wordpress Plugin Stored XSS vulnerability Exploit Author: Hesam Bazvand Contact: https://www.facebook.com/hesam.king73 Software demo : https://sabaidiscuss.com/ Tested on: Windows 7 / Kali Linux Category: WebApps Dork : User Your Mind ! :D Video Demo :...

webapps.nottingham.ac.uk XSS vulnerability

Vulnerable URL: http://webapps.nottingham.ac.uk/refbase/error.php?errorNo=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection

WordPress Plugin Ultimate Product Catalogue 4.2.2 - SQL Injection Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection – Plugin WordPress – Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/ultimate-product-catalogue/ Software Link:...

WordPress Ultimate Product Catalogue 4.2.2 SQL Injection

Exploit Title: Ultimate Product Catalogue 4.2.2 Sql Injection a Plugin WordPress a Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/ultimate-product-catalogue/ Software Link: https://wordpress.org/plugins/ultimate-product-catalogue/ Contact:...

PHPMailer Cross Site Scripting

Title : PHPMailer alert'XSS' == Contact Me : Telegram : @ShahabShamsi Email : [email protected] WebSilte : WwW.iran123.Org...