RIG Exploit Kit Website Redirection

A website redirection vulnerability has been reported in PHP. A remote attacker can exploit this vulnerability to infect users with the RIG exploit kit...

ford-musicbox.eu XSS vulnerability

Vulnerable URL: http://www.ford-musicbox.eu/index.php?page=products=1=4%27%22%3E%3Cscript%3Ealert%28/xssposed/%29%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 18:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Magic Photo Storage Website user/index.php _config[site_path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

CilemNews System <= 1.1 (yazdir.asp haber_id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl victim directory Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages...

Multi Vendor Mall (itemdetail.php & shop.php) SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------- Multi Vendor Mall itemdetail.php & shop.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author...

Arab Network Tech. (ANT) CMS - SQL Injection

No description provided by source. ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ::::::::::::::::::::::::: Exploit Title : Arab Network Tech. ANT CMS SQL Injection Author : Tr0y-x Script Site : www.antpage.comhttp://www.antpage.com/ Version : All Versions Tested on : Windows & Linux...

Gallery <= 2.0.3 stepOrder[] Remote Commands Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Gallery =2.0.3 \stepOrder\ remote cmmnds xctn \r\n; echo by rgod rgodATautisticiDOTorg \r\n; echo site: http://retrogod.altervista.org \r\n\r\n; echo - works with registerglobals = On and magicquotesgpc = Off \r\n; if...

vlinks 2.0.3 (site.php id parameter) SQL Injection

No description provided by source. !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/telechargements/Vlinks2.0.3.zip And All Version Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes :...

Magic Photo Storage Website include/config.php _config[site_path] Parameter Remote File Inclusion

No description provided by source...

phpMyRealty <= 1.0.7 - SQL Injection Vulnerability

No description provided by source. |=========================================================================================| Exploit Title: phpMyRealty = v. 1.0.7 SQL Injection Vulnerability Google Dork: intext:Sort By: Submission Date | Bedrooms | Bathrooms | Price ASC | Price DESC Date:...

musicbox SQL Injection

No description provided by source. Exploit Title: musicbox sql injection Date: 1/6/2010 Author: titanichacker Software Link: http://www.musicboxv2.com Version: all versions Tested with: http://server/index.php?action=genre&id=2' http://server/index.php?term=achkl&in=album&action=search&start=0'...

lightneasy 3.2.2 - Multiple Vulnerabilities

No description provided by source. Vulnerability ID: HTB22750 Reference: http://www.htbridge.ch/advisory/sqlinjectioninlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: SQL...

CubeCart 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------- CubeCart = 5.2.0 cubecart.class.php PHP Object Injection Vulnerability ------------------------------------------------------------------------- - Software Link: http://www.cubecart.com/ -...

SunShop Shopping Cart <= 3.5 (abs_path) RFI Vulnerabilities

No description provided by source. sunshop 4 index.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : SunShop v3.5 Discovered By : irvian scripts site : http://www.turnkeywebtools.com/sunshop/ Thanks To :...

Sulata iSoft (stream.php) Local File Disclosure Exploit

No description provided by source. ========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10...

myBB KingChat Plugin - SQL Injection

No description provided by source. Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:kingchat.php Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : ?php $username=$GET'username';...

Church Edit - Blind SQL Injection

No description provided by source. Exploit Title: Church Edit Blind SQL Injection Google Dork: inurl:This website is powered by Church Edit Date: 15/3/2013 Exploit Author: ThatIcyChill Vendor Homepage: http://www.churchedit.co.uk/ Version: Initial Release...

ProQuiz 2.0.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link:...

Moodle 1.7.1 Index.PHP Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24748/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...

Ypninc Realty Classifieds SQL Injection Vulnerability

No description provided by source. Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:gmap.php?id=; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...