HasanMWB 1.0 - SQL Injection

HasanMWB 1.0 - SQL Injection Exploit Title: HasanMWB 1.0 - SQL Injection Dork: N/A Date: 2018-12-05 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/hasanmwb/ Software Link: https://netcologne.dl.sourceforge.net/project/hasanmwb/HasanMWB-v1.zip Version: 1.0 Category:...

HasanMWB 1.0 - SQL Injection

Exploit Title: HasanMWB 1.0 - SQL Injection Dork: N/A Date: 2018-12-05 Exploit Author: Ihsan Sencan Vendor Homepage: https://sourceforge.net/projects/hasanmwb/ Software Link: https://netcologne.dl.sourceforge.net/project/hasanmwb/HasanMWB-v1.zip Version: 1.0 Category: Webapps Tested on:...

KC GRUP Web Design 1.0 SQL Injection

Exploit Title : KC GRUP Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 03/12/2018 Vendor Homepage : kcgrup.com kcgrupsms.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version Information : 1.0 Explo...

Joomla Com_Finder 4.0.0 Database Disclosure

Exploit Title : Joomla ComFinder Components 4.0.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : joomla.org Software Download Links :...

WordPress WP Backup Plus + 1.0 Database Disclosure

Exploit Title : WordPress WP Backup Plus + 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wpbackupplus.com wplaunchpad.io wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category...

WordPress TemplateOne 1.0 Database Disclosure

Exploit Title : WordPress TemplateOne Themes 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org dubicars.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Versio...

Dolibarr ERP/CRM 8.0.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Dolibarr ERP/CRM = 8.0.3 - Cross-Site Scripting CVE: CVE-2018-19799 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://dolibarr.org Software Link:...

WordPress HpHospital 1.0 Database Disclosure

Exploit Title : WordPress HpHospital Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Exploit Risk : Medium Version Information : 1.0...

Dolibarr ERPCRM 8.0.3 - Cross-Site Scripting

Dolibarr ERPCRM 8.0.3 - Cross-Site Scripting Exploit Title: Dolibarr ERP/CRM = 8.0.3 - Cross-Site Scripting CVE: CVE-2018-19799 Date: 2018-11-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://dolibarr.org Software Link:...

WordPress jomiz-plugins-accounting 1.0 Database Disclosure

Exploit Title : WordPress jomiz-plugins-accounting Plugins 1.0 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Software Download Link : N/A Category : WebApps Explo...

Dolibarr ERP/CRM 8.0.3 - Cross-Site Scripting

Exploit Title: Dolibarr ERP/CRM = 8.0.3 - Cross-Site Scripting CVE: CVE-2018-19799 Date: 2018-11-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://dolibarr.org Software Link: http://sourceforge.net/projects/dolibarr/files/ Version: v8.0.3...

Joomla! Component JE Photo Gallery 1.1 - categoryid SQL Injection

Joomla! Component JE Photo Gallery 1.1 - categoryid SQL Injection Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link:...

Siyah Beyaz Bilisim Web Design 1.0 SQL Injection

Exploit Title : Siyah Beyaz BiliAim Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : siyahbeyazbilisim.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version Information :...

Joomla JE Photo Gallery 1.1 Component - categoryid SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link:...

Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution

Exploit Title: Fleetco Fleet Maintenance Management 1.2 - Remote Code Execution Date: 2018-11-23 Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://www.fleetco.space Software Link: http://www.fleetco.space/download/215/ Version: v1.2 Category: Webap...

Joomla! Component JE Photo Gallery 1.1 - 'categoryid' SQL Injection

Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link: http://joomlaextensions.co.in/download/1387375463JE%20PhotoGallery%20%20J-%203.0%20.zip Version: 1.1 Categor...

Tarantella Enterprise Directory Traversal Vulnerability

Exploit for cgi platform in category web applications !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found i...

Joomla JCE 2.6.33 Database Backup Disclosure

Exploit Title : Joomla Content Editor ComJCE Components 2.5.24 Database Backup Disclosure Information Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : joomlacontenteditor.net Software Download Links :...

Tarantella Enterprise Directory Traversal

Vulnerability found in 2009. !-- Exploit Title: Directory Traversal in Tarantella Enterprise before 3.11 Date: 30-11-2018 Exploit Author: Rafael Pedrero Vendor Homepage: Homepage: http://www.sun.com/ & http://www.oracle.com/ Software Link: the product is discontinued vulnerability found in 2009...

Joomla Fabrik 3.9 CSRF / LFI / Shell Upload

Exploit Title : Joomla ComFabrik 3.9 pluginAjax importcsv advancedsearch getprodimg controller LFI with htaccess CSRF Shell Access Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 29/11/2018 Vendor Homepage : extensions.joomla.org/extension/fabrik/...