X7 Chat 2.0.5.1 CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

ASPCMS留言板插马

简要描述： 朋友丢来一个程序,看着看着就发现了一个漏洞,ASPCMS最新版本直接拿shell,应该很多人早就发现了。 详细说明： google关键字：powered by ASPCMS 大概有几十页网站，基本上都可以拿下，aspcms主要是信息发布系统，影响版本为asp。漏洞成因，在留言板处对信息处理不当，导致代码注入。可直接将一句话木马插入数据库。 数据库默认配置为asp.目录在/data/data.asp下。 利用方法，保证默认数据库路径末更改及可留言，就算不能留言，可构造，经测试，九成的末更改： 在留言的标题处插入：┼攠數畣整爠煥敵瑳∨≡┩愾 这样就往数据库中插入了一句话，密码为a...

Unfixed XSS vulnerability at www.torrent-francais.com

Security researcher Atmon3r, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.torrent-francais.com, which at the time of submission ranked 324004 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It i...

Ailly sur Noye SQL Injection

Exploit Title: Ailly sur Noye SQL Ýnjecktion Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Website : http://www.mairie-aillysurnoye.fr/ Date : 16.03.2012 Platform : Php Demos Site : http://www.mairie-aillysurnoye.fr/pages-ailly-sur-noye.php?id=20SQL Virüslerden Önce Akil Var...

FlexCMS 3.2.1 - Persistent Cross-Site Scripting

FlexCMS 3.2.1 - Persistent Cross-Site Scripting Persistent XSS in FLEXCMS 3.2.1 Software vendor: http://www.flexcms.com/flex/index.html The Persistent XSS appears when any user go to edit profile Display name and then injects the xss code instead of his display name. After inkection this code. In...

Beats Website SQL Injection Vulnerability

Exploit for php platform in category web applications \ \ / | \ / | | | | \ / | || | / | | | / ^ /| |/ ^ / / /\ | ||\ | / || || / | \ / | | \ \ / / | |\ / / /\ \ / / \ Y / ^ / / || / / / Exploit Title: Beats Website SQLi Date: 20/02/2012 Author: system k1ller Vendor or Software Link:...

Ananta Gazelle CMS - Update Statement Sql injection

Exploit for php platform in category web applications Exploit Title: Ananta Gazelle CMS - Update Statement Sql injection Google Dork: - Date: 07-02-2012 Author: hackme Software Link: http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/AnantaGazelle1.0.zip/ Version: 1.0 stable...

Joomla Firmy SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http:///ww.1337day.com 0 1 + Support...

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

Unfixed XSS vulnerability at www.sernin-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.sernin-immobilier.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at www.thebakerscottage.com

Security researcher strohhalm, has submitted on 29/01/2012 a cross-site-scripting XSS vulnerability affecting www.thebakerscottage.com, which at the time of submission ranked 8313478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. I...

pGB 2.12 kommentar.php SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: pGB 2.12 SQL Injection Vulnerability Author: 3spi0n Software website: http://www.powie.de/ Test platform: BackTrack 5 - Win7 Ultimate Platform: Php $ The defect file: kommentar.php $ Test site: http://www.badguest.cn /kommentar. php? id=1 1 7' Dar bi Koridor Benimki, Kendimi Aradigim...

Unfixed XSS vulnerability at www.bullydog.com

Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting www.bullydog.com, which at the time of submission ranked 474285 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

A Web Site 4 All SQL Injection

Exploit Title: A Web Site 4 All Sql Injecti0n Vulnerability Date: 12/01/2012 - 00.36 Author: 3spi0n Software Website: http://www.awebsite4all.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Demo Sites: http://www.panchayats.in/php/showPanchNewsDetails.php?linkid=79%22&newsid=25PhpSQLi...

Look411.com Cross Site Scripting

WhiteHatZone Vulnerable : http://www.look411.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://www.look411.com/?p=numbersearch&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E&country=US Greetz : Vidit Baxi, Sumit Pareek...

Unfixed XSS vulnerability at starwapz.wapka.mobi

Security researcher Snypter Dhruv, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting starwapz.wapka.mobi, which at the time of submission ranked 17409234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. I...

Unfixed XSS vulnerability at 123gite.com

Security researcher Atmon3r, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting 123gite.com, which at the time of submission ranked 2108016 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently...

Indian Embassy SQL Injection

Title : Indýan Embassy Access Injecti0n Vulnerability Author: 3spi0n Date : 16/12/2011 - 14:16 About Indýan Embassy ; The Embassy of India, Ljubljana Republic of Slovenia Site ; http://www.indianembassy.si/ Vulnerable File ; All Files is Access Injecti0n Vulnerable ! Ex ;...

Blackberry Website - URL Redirection Vulnerability

Document Title: =============== Blackberry Website - URL Redirection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=340 Release Date: ============= 2011-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 340...

Studio Dinitz And Ccom SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Exploit Title: Studio Dinitz & Ccom SQL Injection Vulnerability Author: tempemendoan...