Unfixed XSS vulnerability at www.torrent-francais.com

Security researcher Atmon3r, has submitted on 04/02/2012 a cross-site-scripting XSS vulnerability affecting www.torrent-francais.com, which at the time of submission ranked 324004 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/02/2012. It i...

Ailly sur Noye SQL Injection

Exploit Title: Ailly sur Noye SQL Ýnjecktion Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Website : http://www.mairie-aillysurnoye.fr/ Date : 16.03.2012 Platform : Php Demos Site : http://www.mairie-aillysurnoye.fr/pages-ailly-sur-noye.php?id=20SQL Virüslerden Önce Akil Var...

FlexCMS 3.2.1 - Persistent Cross-Site Scripting

FlexCMS 3.2.1 - Persistent Cross-Site Scripting Persistent XSS in FLEXCMS 3.2.1 Software vendor: http://www.flexcms.com/flex/index.html The Persistent XSS appears when any user go to edit profile Display name and then injects the xss code instead of his display name. After inkection this code. In...

Beats Website SQL Injection Vulnerability

Exploit for php platform in category web applications \ \ / | \ / | | | | \ / | || | / | | | / ^ /| |/ ^ / / /\ | ||\ | / || || / | \ / | | \ \ / / | |\ / / /\ \ / / \ Y / ^ / / || / / / Exploit Title: Beats Website SQLi Date: 20/02/2012 Author: system k1ller Vendor or Software Link:...

Ananta Gazelle CMS - Update Statement Sql injection

Exploit for php platform in category web applications Exploit Title: Ananta Gazelle CMS - Update Statement Sql injection Google Dork: - Date: 07-02-2012 Author: hackme Software Link: http://sourceforge.net/projects/ananta/files/stable/Gazelle 1.0 stable/AnantaGazelle1.0.zip/ Version: 1.0 stable...

Unfixed XSS vulnerability at www.sernin-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.sernin-immobilier.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Joomla Firmy SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Official Website: http:///ww.1337day.com 0 1 + Support...

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

Unfixed XSS vulnerability at www.thebakerscottage.com

Security researcher strohhalm, has submitted on 29/01/2012 a cross-site-scripting XSS vulnerability affecting www.thebakerscottage.com, which at the time of submission ranked 8313478 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. I...

pGB 2.12 kommentar.php SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: pGB 2.12 SQL Injection Vulnerability Author: 3spi0n Software website: http://www.powie.de/ Test platform: BackTrack 5 - Win7 Ultimate Platform: Php $ The defect file: kommentar.php $ Test site: http://www.badguest.cn /kommentar. php? id=1 1 7' Dar bi Koridor Benimki, Kendimi Aradigim...

Unfixed XSS vulnerability at www.bullydog.com

Security researcher Atmon3r, has submitted on 13/01/2012 a cross-site-scripting XSS vulnerability affecting www.bullydog.com, which at the time of submission ranked 474285 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is...

A Web Site 4 All SQL Injection

Exploit Title: A Web Site 4 All Sql Injecti0n Vulnerability Date: 12/01/2012 - 00.36 Author: 3spi0n Software Website: http://www.awebsite4all.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Demo Sites: http://www.panchayats.in/php/showPanchNewsDetails.php?linkid=79%22&newsid=25PhpSQLi...

Look411.com Cross Site Scripting

WhiteHatZone Vulnerable : http://www.look411.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://www.look411.com/?p=numbersearch&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E&country=US Greetz : Vidit Baxi, Sumit Pareek...

Unfixed XSS vulnerability at starwapz.wapka.mobi

Security researcher Snypter Dhruv, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting starwapz.wapka.mobi, which at the time of submission ranked 17409234 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. I...

Unfixed XSS vulnerability at 123gite.com

Security researcher Atmon3r, has submitted on 21/12/2011 a cross-site-scripting XSS vulnerability affecting 123gite.com, which at the time of submission ranked 2108016 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently...

Indian Embassy SQL Injection

Title : Indýan Embassy Access Injecti0n Vulnerability Author: 3spi0n Date : 16/12/2011 - 14:16 About Indýan Embassy ; The Embassy of India, Ljubljana Republic of Slovenia Site ; http://www.indianembassy.si/ Vulnerable File ; All Files is Access Injecti0n Vulnerable ! Ex ;...

Blackberry Website - URL Redirection Vulnerability

Document Title: =============== Blackberry Website - URL Redirection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=340 Release Date: ============= 2011-12-14 Vulnerability Laboratory ID VL-ID: ==================================== 340...

Studio Dinitz And Ccom SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Exploit Title: Studio Dinitz & Ccom SQL Injection Vulnerability Author: tempemendoan...

Powered By iEditor SQL Injection

. . . | | | / || | | / \ / | / \ / \ / \ / /| |\ \ | || | / // | | | \ / \ \ | | / \ |||| /\ | / || / \ / || / / / / / / / =========================================================================== Title : Powered By iEditor SQL Injection Vulnerability Vendor or Software Link :...

openEngine 2.0 Multiple Blind SQL Injection vulnerabilities

Exploit for php platform in category web applications Author: Stefan Schurtz Affected Software: Successfully tested on openEngine 2.0 100226 Vendor URL: http://www.openengine.de/ Vendor Status: informed CVE-ID: - ========================== Vulnerability Description: ========================== The...