WordPress Plugin Booking Calendar 8.4.3 - (Authenticated) SQL Injection

WordPress Plugin Booking Calendar 8.4.3 - Authenticated SQL Injection Exploit Title: Wordpress Booking Calendar v8.4.3 - Authenticated SQL Injection Vulnerability Date: 2018-12-28 Exploit Author: B0UG Vendor Homepage: https://wpbookingcalendar.com/ Software Link:...

PilusCart 1.4.1 SQL Injection

Exploit Title: PilusCart 1.4.1 - 'send' SQL Vulnerability Dork: N/A Date: 10-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/pilus/ Software Link: https://sourceforge.net/projects/pilus/ Version: 1.4.1 Category: Webapps Tested on: Wampp @Win CVE: N/A...

WordPress Jssor-Slider 3.1.24 Cross Site Request Forgery / File Upload

Exploit Title : WordPress Jssor-Slider Plugins 3.1.24 CSRF Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : jssor.com drcsystems.com ethicsolutions.com Software Download Link :...

Joomla PhocaMaps 3.0.5 Database Disclosure / SQL Injection

Exploit Title : Joomla PhocaMaps 3.0.5 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phoca.cz/phocamaps Software Download Link : phoca.cz/download/category/38-phoca-maps-plugin Software Informati...

ZRECore 1.3.1 Database Configuration Disclosure

Exploit Title : ZRECore 1.3.1 Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : zend.com Software Download Link : github.com/zrecore/ZRECore/archive/master.zip Software Information Link :...

Invo PhalconPHP 1.x Database Configuration Disclosure

Exploit Title : Unvo PhalconPHP 1.x Database Config Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phalconphp.com Software Download Link : github.com/phalcon/invo/archive/master.zip Software Information Link :...

Joomla LightGallery 1.2.1 SQL Injection

Exploit Title : Joomla LightGallery Components 1.2.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : joompolitan.com Software Download Link : joompolitan.com/lightgallery.html...

phpMyVisites CNTNT Templates 2.4 SQL Injection

Exploit Title : phpMyVisites CNTNT Templates 2.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phpmyvisites.net Software Download Link : phpmyvisites.net/telechargements.html Software Information Link :...

PilusCart 1.4.1 - send SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PilusCart 1.4.1 - 'send' SQL Vulnerability Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/pilus/ Software Link: https://sourceforge.net/projects/pilus/ Version: 1.4.1 Category: Webapps Tested o...

Rukovoditel Project Management CRM 2.4.1 - Cross-Site Scripting

Rukovoditel Project Management CRM 2.4.1 - Cross-Site Scripting Exploit Title : Rukovoditel Project Management CRM 2.4.1 - XSS Vulnerability DOM BASED Author Discovered By : Mehmet EMIROGLU Date : 29/01/2019 Vendor Homepage : https://www.rukovoditel.net/ Software Link :...

PilusCart 1.4.1 - send SQL Injection

PilusCart 1.4.1 - send SQL Injection Exploit Title: PilusCart 1.4.1 - 'send' SQL Vulnerability Dork: N/A Date: 10-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/pilus/ Software Link: https://sourceforge.net/projects/pilus/ Version: 1.4.1 Category: Webapp...

Rukovoditel Project Management CRM 2.4.1 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title : Rukovoditel Project Management CRM 2.4.1 - XSS Vulnerability DOM BASED Author Discovered By : Mehmet EMIROGLU Vendor Homepage : https://www.rukovoditel.net/ Software Link : https://sourceforge.net/projects/rukovoditel/ Affected...

PilusCart 1.4.1 - 'send' SQL Injection

Exploit Title: PilusCart 1.4.1 - 'send' SQL Vulnerability Dork: N/A Date: 10-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/pilus/ Software Link: https://sourceforge.net/projects/pilus/ Version: 1.4.1 Category: Webapps Tested on: Wampp @Win CVE: N/A...

Joomla ZCalendar Zap Calendar 4.4.0 SQL Injection

Exploit Title : Joomla ZCalendar Zap Calendar 4.4.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : zcontent.net - zapcalendar.com Software Download Link : zcontent.net/products/subscriptions Software Information Link :...

Joomla ABook Alexandria Book Library 3.1.4 SQL Injection

Exploit Title : Joomla ABook Alexandria Book Library 3.1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : alexandriabooklibrary.org Software Download Link : alexandriabooklibrary.org/en/downloads/18-components.html...

Webiness Inventory 2.3 SQL Injection

=========================================================================================== Exploit Title: Webiness Inventory 2.3 - 'email' SQL Vulnerability Dork: N/A Date: 10-02-2019 Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://sourceforge.net/projects/webinessinventory/files/...

Joomla Agora 4.10 Bypass / SQL Injection

Exploit Title : Joomla Agora 4.10 SQL Injection / Authentication Bypass Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : joomla4ever.org Software Download Link : joomla4ever.org/archive/ext/comagora.zip Software Information Link :...

Joomla PhocaGuestBook 3.0.8 Database Disclosure / SQL Injection

Exploit Title : Joomla PhocaGuestBook 3.0.8 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : phoca.cz/phocaguestbook Software Download Link : phoca.cz/download/category/5-phoca-guestbook-component...

Joomla SermonSpeaker 5.9.0 Database Disclosure / SQL Injection

Exploit Title : Joomla SermonSpeaker 5.9.0 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : sermonspeaker.net Software Download Link : github.com/Bakual/SermonSpeaker/archive/master.zip...

Joomla WordPress Blog 4.8.0 SQL Injection

Exploit Title : Joomla WordPress Blog 4.8.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : cms2cms.com - corephp.com Software Download Link : corephp.com/joomla-products/wordpress-for-joomla/buy-now/new Software...