Pululart CMS SQL Injection

Exploit Title: Pululart CMS Sql Injection Vulnerability Google Dork:intext:"Powered by Pululart" Date: 08/24/2012 Author: Crim3R Vendor Home : http://www.pululart.com/ Tested on: all $ $ ----Author will be not responsible for any damage---- $ ========================================...

EAFlashUpload 2.5 - Arbitrary File Upload

Exploit Title: EAFlashUpload v 2.5 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: EAFlashUpload v 2.5 Software Link: http://www.easyalgo.com/downloads.aspxEAFlashUpload Demo:...

Makit Newsposter Script News_Page.ASP SQL注入漏洞

Makit Newsposter Script是一款基于ASP的WEB应用程序。 Makit Newsposter Script不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'NewsPage.ASP'脚本对用户提交的'uid'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Makit Newsposter Script 目前没有详细解决方案提供： http://www.makit.net/...