Timesheet Next Gen 1.5.2 - Multiple SQL Injections

Exploit Title: Timesheet Next Gen 1.5.2 Multiple SQLi Date: 02/23/12 Author: G13 Software Link: https://sourceforge.net/projects/tsheetx/ Version: 1.5.2 Category: webapps php Vulnerability The login.php page has multiple SQL injection vulnerabilities. Both the 'username' and 'password' parameters...

Wpmanager version wpm 2.2.0 (FCKeditor) Remote File Upload

Exploit for php platform in category web applications Exploit Title:Wpmanager version wpm 2.2.0 FCKeditor Remote File Upload Author: T0x!c Facebook Page: www.facebook.com/DzTem E-mail: email protected Category:: webapps Google Dork:intext:"WPM version 2.3.0 © 2005 / 2013 Wpmanager" Software :...

Piwigo 2.3.2 Shell Upload

Exploit Title: piwigo 2.3.2 Remote File Upload Author: T0x!c Date : 26-02-2012 Facebook Page: www.facebook.com/DzTem E-mail: [email protected] Category:: webapps Google Dork:inurl:"index.php?/addphotos"" Vendor: http://www.phpsources.org/description-script-Piwigo15.htm Version: 2.3.2 Tested on:...

PHP Gift Registry 1.5.5 SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

PHP Gift Registry 1.5.5 - SQL Injection

PHP Gift Registry 1.5.5 - SQL Injection Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL...

PHP Gift Registry 1.5.5 - SQL Injection

Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is vulnerable to SQL Injection. A user must be signed in to...

PHP Gift Registry 1.5.5 SQL Injection

Exploit for php platform in category web applications Exploit Title: PHP Gift Registry 1.5.5 SQL Injection Date: 02/22/12 Author: G13 Software Link: https://sourceforge.net/projects/phpgiftreg/ Version: 1.5.5 Category: webapps php Vulnerability The userid parameter in the users.php file is...

Sagem [email protected] 2604 CSRF Vulnerability (ADSL Router)

Exploit for hardware platform in category web applications ================================================================================ || | | || || || |/ | || |/ | | | | | | | | | | | \ | | | | \ ================================================================================ Exploit Title:...

Joomla com_etree Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla cometree Blind SQL-inj Vuln Date: 20.02.2012 Author: Mach1ne Version: 1.5.+ Category:: remote, webapps Google dork: inurl:compersonal Tested in: web ============================== ================================= Multipl...

CDPI Software SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

SimogeoFilemanager Upload File Vulnerability

Exploit for php platform in category web applications RoxTeam Italian Hackers And Security Team 2012 Exploit Title: SimogeoFilemanager Upload File Vulnerability Date: 09/02/2012 Author: hack Author Email: RoxSecurityTeamatcomdothotmail.it Category: webapps Risk: Higt Vendor or Software Link:...

Maxxweb CMS SQL Injection

Exploit Title: maxxweb Cms Sql Injection Google Dork: "maxxweb.de Internet-Dienstleistungen" Discovered By: M4sT3r4N0nY Software Link: http://maxxweb.de/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit:...

Neda Rayaneh CMS SQL Injection

Exploit Title: neda rayaneh Cms Sql Injection Google Dork: "designed and developed by neda rayaneh institute" Discovered By: M4sT3r4N0nY Software Link: http://www.neda.net.ir/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit:...

TND Media CMS SQL Injection

Exploit Title: TND media Cms Sql Injection Google Dork: "TND media webdesign" Discovered By: M4sT3r4N0nY Software Link: http://www.tndmedia.nl/ Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux Ubuntu - Windows Server - win7 Exploit: http://target/releases.php?id=S...

Lifesystems Cross Site Scripting

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ hacked / http://www.cfkeep.org/html/error/index.php?msg=" hacked / / ======================================================================= || spical thanks : bl4ck.viper...

NeBSGT (contenido.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: nebsgt contenido.php SQL Injection Vulnerability Category: webapps Web Site: http://www.nebsgt.com Author: @failroot Contact: email protected Google dork: allinurl:.gt/contenido.php?id= or intext:Powered by NeBSGT Exploit...

Joomla com_jomdirectory SQL Injection vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla comjomdirectory SQL-inj Vuln Date: 21.01.2012 Author: Mach1ne Version: 1.5.+ Category:: remote, webapps Google dork: inurl:comjomdirectory Tested in: web...

CityVariety SQL Injection

================================================================================= Web : ashiyane.org e-mail : HashoR DOT BackHat AT Gmail.Com I'm HashoR , member from ashiyane.org -!We Love KurDestaN!- ================================================================================...

Joomla "com_vid" component SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla "comvid" component SQL Injection Date: 16.01.2012 Author: Ereee Version: all Category:: remote, webapps Google dork: inurl:"?option=comvid" Tested in: web...

Joomla "com_club" component SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla "comclub" component SQL Injection Date: 16.01.2012 Author: Ereee Version: all Category:: remote, webapps Google dork: inurl:"?option=comclub" Tested in: web...