Brainee Creations SQL Injection

+Exploit Title: Brainee Creations Database Access vulnerability +Author : ^Xecuti0n3r + Date : 15.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork1 : intext:"Site Designed by Brainee Creations" inurl:product.php? + dork2 : intext:"Site Designed by Brainee Creations" inurl:page.php?...

Pakistan Air Force Vulnerable to SQLi By Lionaneesh

Pakistan Air Force Vulnerable to SQLi By Lionaneesh Vulnerable Link : https://www.joinpaf.gov.pk/page.php?pageid='149 Hacked Database :...

iwebshop0. 7. 7 injection 0day-vulnerability warning-the black bar safety net

Use method: 1, the first casual look at a product,and then access the 2, the use of cookies by the browser, you will find inside will be more similar to"iwebhisgoods2 2this number is your access to the product id=1 2 8 2 2 8 2 7 6 2"Project 3, the first in the"2 2"rear add a single quotes, so tha...

Readmore Systems Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sql injextion Google Dork: Website Powered By ReadMore Systems, Incorporated Date: 02/03/2011 Author: Mohammed FathivBzone,Zooka, El3arby Egyption Hacker's Software Link: http://readmoresystems.com Version: All Tested on: Window...

Rae Media Real Estate Single Agent - SQL Injection

Rae Media Real Estate Single Agent - SQL Injection source: https://www.securityfocus.com/bid/45211/info Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection http://adv.salvatorefresta.net/allCineVidJoomlaComponent1.0.0BlindSQLInjectionVulnerability-18012011.txt allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name allCineVid Vendor http://www.joomtraders.com Versions Affected...

Discover MaosinCMS website system vulnerability testing-vulnerability warning-the black bar safety net

The recent move easy CMS vulnerability can be said to really was a fire, this article written by CMS although there is no move-powerful, but also the presence of injection vulnerabilities. This vulnerability with the tool is swept less than, can be said that the injection has been made by explici...

PhpGedView 4.2.3 - Local File Inclusion

PhpGedView 4.2.3 - Local File Inclusion !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com PhpGedView = 4.2.3 Local File Inclusion Vulnerability Script:...

Unfixed XSS vulnerability at www.starpulse.com

Security researcher VirtualSystEm, has submitted on 30/12/2010 a cross-site-scripting XSS vulnerability affecting www.starpulse.com, which at the time of submission ranked 5099 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Qualikom CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Qualikom CMS SQL Injection Vulnerability ======================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0 1...

Jurpopage 0.2.0 SQL Injection

========================================================= Jurpopage SQL Injection ========================================================= Exploit Title : Jurpopage SQL Injection Date : 24 Noveber 2010 Author : Suddendeath [email protected] Platform/Tested on: Windows XP 2 SP 2 myweb :...

Arabian YouTube Script - Blind SQL Injection

Arabian YouTube Script - Blind SQL Injection =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-In The Name Of Allah The Mercifull-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tybe: blind SQL Injection Vulnerabilities Vendor: www.4smart.net + Software: arabian youtube script + author: R3d-D3v!L + TEAM:...

Invision Power Board 3 SQL Injection

============================================================ Exploit Title: Invision Power Board 3 Multiple Vuln Date: 13/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.invisionpower.com/ Vulnerability Type: Full Path Disclosure Version: 3.x.x All 3...

Punbb 1.3.4 - Multiple Full Path Disclosures

Punbb 1.3.4 - Multiple Full Path Disclosures Exploit Title: Punbb 1.3.4 Full Path Disclosure Date: 07/11/2010 Author: SYSTEMOVERIDE, OverSecurityCrew Software Link: http://punbb.informer.com/ Vulnerability Type: Full Path Disclosure Version: 1.3.4 Vulnerability Details: The vulnerabilities are in...

JVN#01948274: Ichitaro series vulnerable to arbitrary code execution

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. Impact When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code. Solution Update the Software...

Pub-Me CMS - Blind SQL Injection

Pub-Me CMS - Blind SQL Injection | | | | |.' | | | | | ||| |||| Pub-Me CMS Blind SQL Injection Vulnerability Name: Pub-Me CMS Vendor: http://www.pub-me.com/ Versions Affected: //unknown, all current affected - devel. homepage & 33 clients web pages Software Link: Not aviable, Demo can be requeste...

iMoveis v1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== iMoveis v1.1 SQL Injection Vulnerability ======================================== Date : 26/10/2010 Author : EraGoN Software link : http://baixar7.com/download/acc-imoveis-script-php.rar/3d1e7bf4b9...

Blog Turkce 1.1.3 Database Disclosure

!/usr/bin/perl -w blog turkce v1.1.3-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

Postcard Mentor - Database Disclosure Exploit

Exploit for php platform in category web applications ============================================= Postcard Mentor - Database Disclosure Exploit ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Unfixed XSS vulnerability at www.clg-mauzan.ac-aix-marseille.fr

Security researcher CalloGsK2, has submitted on 10/05/2010 a cross-site-scripting XSS vulnerability affecting www.clg-mauzan.ac-aix-marseille.fr, which at the time of submission ranked 38773 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...