Joomla BT Media Component (com_bt_media) - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0=...

Joomla BT Media 1.0 SQL Injection

Exploit Title : Joomla combtmedia - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/bt-media-gallery Category: Webapps Tested on: Win Version: 1.0 Date: 2016/06/19 PoC: categories0= Parameter Vulnerable To SQL Demo :...

Joomla En-Masse 6.4 SQL Injection

Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15 Google Dork: inurl:component/enmasse/ PoC: id Parameter...

Joomla! Component com_enmasse 5.1 6.4 - SQL Injection

Joomla! Component comenmasse 5.1 6.4 - SQL Injection Exploit Title: Joomla comenmasse - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : http://extensions.joomla.org/extensions/extension/social-web/social-buy/en-masse Category: Webapps Tested on: Win Versions: 5.1-6.4 Date: 2016/06/15...

Joomla Catfiltering 1.5.4 SQL Injection

Exploit Title : Joomla comcatfiltering - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comcatfiltering Category: Webapps Tested on: Win Version: 1.5.4 Date: 2016/06/14 PoC: flt1= Get Parameter Vulnerable To SQL Demo :...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Joomla! Component compayplans 3.3.6 - SQL Injection Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla! Component com_payplans 3.3.6 - SQL Injection

Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter Vulnerable To SQL Demo :...

Joomla! Extension PayPlans (com_payplans) 3.3.6 - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Joomla Affiliate Tracker 2.0.3 SQL Injection

Exploit Title : Joomla comaffiliatetracker - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/affiliate-tracker Category: Webapps Tested on: Win Version: 2.0.3 Date: 2016/06/13 PoC: First Login To Panel And Go To Affiliate Tracker userid...

Joomla Affiliate 1.0.3 SQL Injection

Exploit Title : Joomla comaffiliate - SQL Injection Exploit Author : Persian Hack Team Google Dork : inurl:index.php?option=comaffiliate Category: Webapps Tested on: Win Version: 1.0.3 Date: 2016/06/13 PoC: --Bypass Authentication http://www.site.com/index.php?option=comaffiliate&view=login...

Joomla Maqma Helpdesk 4.2.3 Cross Site Scripting

Exploit Title : Joomla commaqmahelpdesk - XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/maqma-helpdesk Category: Webapps Tested on: Win Date: 2016/06/09 Version : 4.2.3 PoC: Add Your Tiket sometimes you must login First in Message Te...

Debian DLA-509-1 : samba security update

The Samba 2:3.6.6-6+deb7u9 release, issued by the DSA-3548-1, introduced different regressions causing trust relationship with Win 7 domains to fail. The fix for the CVE-2016-2115 has been reverted, so administrators should set 'client signing = required' instead. For Debian 7 'Wheezy', these...

PHPFox 4 Cross Site Scripting

Title : PhpFox4 Cross Site Scripting Vuln. Author : bl4ckMohajeM [email protected] Software Link: http://www.phpfox.com/ Version: 4 Date : 06/09/2016 Category: WebApps Tested with : Ubuntu / Win Description In this Cms theres is a Cross Site Scripting Vurlnerablities in 'nsextt' Parameter...

DLA-509-1 samba - security update

Bulletin has no description...

Joomla Joomdoc 4.0.3 Path Disclosure

Exploit Title : Joomla comjoomdoc - Full Path Disclosure Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/joomdoc Category: Webapps Tested on: Win Version: 4.0.3 Date: 2016/06/08 PoC: Full Path Disclosure FPD vulnerabilities enable the...

Joomla AvailCal 05 SQL Injection

Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...

DarkComet Server Remote File Download Exploit

This module exploits an arbitrary file download vulnerability in the DarkComet C server versions 3.2 and up. The exploit does not need to know the password chosen for the bot/server communication. This module requires Metasploit: https://metasploit.com/download Current source:...

Joomla Jumi 3.0.5 Cross Site Scripting

Exploit Title : Joomla Component comjumi - Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/jumi Category: Webapps Tested on: Win Date: 2016/05/26 Version : 3.0.5 PoC: fileid vulnerable to XSS Payload = "PersianHack Team Demo :...

Dswjcms Win/Index/loanAjax.html,Loan/loanAjax.html 两处SQL注入

No description provided by source...

Tuninfoforyou 2 / 2.5 Backdoor Account

Exploit Title : Tuninfoforyou - Weak Password Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://www.tuninfoforyou.com/ Category: Webapps Tested on: Win Version: 2 And 2.5 Date: 2016/05/20 PoC: Login Page : /reservation/admin/ And /b2b/admin/ User and Password = admin Demo ...