flash-xdomain-xploit

Author: Gursev Singh Kalra [email protected] Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml Compiling and deploying the Proof of Concept ActionScript code 1. Download and install Apache Flex SDK. It comes with an ActionScript compiler. 2. Copy the ActionScript code to...

Joomla Docman Path Disclosure / Local File Inclusion

Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: [email protected] Date: 13/07/2015 Vendor Homepage:...

Joomla Docman Path Disclosure / Local File Inclusion Vulnerabilities

Joomla Docman suffers from full path disclosure and local file inclusion vulnerabilities. Joomla docman Component 'comdocman' Full Path DisclosureFPD & Local File Disclosure/IncludeLFD/LFI CWE: CWE-200FPD CWE-98LFI/LFD Risk: High Author: Hugo Santiago dos Santos Contact: email protected Date:...

jetAudio 7.1.9.4030 plus vx - (.m3u) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...

Jakarta Slide <= 2.1 RC1 Remote File Disclosure Exploit

No description provided by source. !/usr/bin/perl Jakarta Slide Remote File Disclosure Zeroday Xploit eliteb0y / 2007 thanx to the whole team & andi : +++KEEP PRIV8+++ This Bug may reside in different WebDav implementations, Warp your mind! +You will need auth for the exploit to work... use...

Joomla com_autartimonial Sqli Vulnerability

No description provided by source. Name : Joomla comautartimonial Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://www.autartica.be/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

Joomla Joomanager SQL Injection Vulnerability

No description provided by source. Note from the vendor received 10Mar11: The old code was using JReguest::GetVar and we change it to JReguest::GetInt so the catid must be an integer only and not text. We updated this over 6 months ago in version 1.1.1 1 1 0 I'm Sid3^effects member from Inj3ct0r...

Virtual Store Open 3.0 - Acess SQL Injection

!/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection Found: Br0ly google dork:...

Joomla! Component NeoRecruit 1.4 - SQL Injection

Joomla! Component NeoRecruit 1.4 - SQL Injection / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

ZeeMatri 3.x - Arbitrary File Upload

ZeeMatri 3.x - Arbitrary File Upload 1 1 0 I'm SONiC member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : ZeeMatri v3x- Arbitrary file upload Vulnerability Date : july 23,2010 Critical Level :VERY HIGH vendor URL :?? http://www.zeeways.co...

AJ Article 3.0 - Cross-Site Scripting

AJ Article 3.0 - Cross-Site Scripting 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 vendor URL :http://www.ajsquare.com/ Google Dork :Powered By: AJ Square Inc Author : Sid3^effects aKa HaRi special thanks to : r007...

Joomla! Component MyHome - Blind SQL Injection

Joomla! Component MyHome - Blind SQL Injection Name : Joomla commyhome BSQLi Vulnerability Date : july 10,2010 Critical Level : HIGH vendor URL :http://www.unisoft.me/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz t...

Inout Music 1.0 - Arbitrary File Upload

Inout Music 1.0 - Arbitrary File Upload ============================================================== Inout Music version 1.0 Shell upload Vulnerabilty ============================================================== Name : Inout Music version 1.0 Shell upload Vulnerabilty Date : july 9,2010...

Simple Document Management System - SQL Injection

Simple Document Management System - SQL Injection I'm SiD3^effects member from Inj3ct0r Team Support e-mail : submitatinj3ct0r.com Name : SDMSSimple document management system SQli Vulnerability Date : july, 7 2010 Critical Level : HIGH Vendor Url : http://sdms.cafuego.net/ Author : Sid3^effects...

Simple document management system SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================================== SDMSSimple document management system SQL Injection Vulnerability ===================================================================...

Infotel (pagina.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ Infotel pagina.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0...

Joomla Component com_awd_song persistent XSS Vulnerability

Exploit for php platform in category web applications ========================================================== Joomla Component comawdsong persistent XSS Vulnerability ==========================================================...

Joomla! Component com_eportfolio - Arbitrary File Upload

Joomla! Component comeportfolio - Arbitrary File Upload 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Joomla comeportfolio Upload Vulnerability Date : june, 20 2010 Critical Level : HIGH Vendor Url :...

Joomla Component com_joomlisting Upload Vulnerability

Exploit for php platform in category web applications ===================================================== Joomla Component comjoomlisting Upload Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

jetAudio v 7.1.9.4030 plus vx (.m3u ) Local Stack Overflow (SEH)

No description provided by source. + Vulnerability : jetAudio v 7.1.9.4030 plus vx .m3u Local Stack Overflow + Detected by : HACK4LOVE http://www.milw0rm.com/exploits/9359 + Product : jetAudio + Versions affected : 7.1.9.4030 plus vx +...