Security home

BASE 1.4.5 SQL Injection

# Exploit Title: BASE 1.4.5 SQL Injection Vulnerability # Date: 30/01/2012 # Author: a.kadir altan (testpenter_AT_gmail.com) # Software Link: http://base.secureideas.net # Version: 1.4.5 # Platform: PHP ####...

XRayCMS 1.1.1 SQL Injection

# Exploit Title: XRayCMS 1.1.1 SQL Injection Vulnerability # Date: 2/5/2012 # Author: chap0 # Software Link: http://sourceforge.net/projects/xraycms/files/latest/download # Version: 1.1.1 # Tested on: Ubuntu...

Conduit Wibiya Open URL Redirection

TITLE: Conduit Wibiya open URL Redirection vendor: Conduit Author: r007k17-w Email: n4gb07@gmail.com http://www.facebook.com/#!/r007k17w My blog: http://shadowrootkit.wordpress.com/ Google Dork: Modula...

LibGuides Cross Site Scripting

# Exploit Title: LibGuides "tag search" Cross Site Scripting # Date: 6.02.2012 # Author: Sony # Software Link: http://www.springshare.com/libguides/ # Google Dorks: inurl:searchtags.php?iid= or intext:Powere...

Brainkeeper Enterprise Wiki Cross Site Scripting

# Exploit Title: Brainkeeper Enterprise Wiki "search.php" Cross Site Scripting # Date: 6.02.2012 # Author: Sony # Software Link: http://www.brainkeeper.com # Web Browser : Mozilla Firefox # Blog : http://st2...

NexorONE Online Banking Cross Site Scripting

Title: ====== NexorONE Online Banking - Multiple Cross Site Vulnerabilities Date: ===== 2012-02-04 References: =========== http://www.vulnerability-lab.com/get_content.php?id=304 VL-ID: ===== 304 Introdu...

Facebook Game Store SQL Injection

Title: ====== Facebook Game Store - SQL Injection Vulnerability Date: ===== 2012-02-04 References: =========== http://www.vulnerability-lab.com/get_content.php?id=408 VL-ID: ===== 408 Introduction: =====...

LibAnswers Springshare Library Cross Site Scripting

# Exploit Title: LibAnswers Springshare Library Cross Site Scripting # Date: 6.02.2012 # Author: Sony # Software Link: http://www.springshare.com/libanswers/ # Google Dorks: browse.php?tid= intext:Powered by...

Snort Report 1.3.2 Local File Inclusion

# Exploit Title: Snort Report Local File Inclusion # Date: 05/02/2012 # Author: T0x!c # Software Link: http://www.symmetrixtech.com/ids/snortreport-1.3.2.tar.gz # Version: <= 1.3.2 # Platform: PHP ##########...

Tube Ace SQL Injection

# Exploit Title: Tube Ace(Adult PHP Tube Script) SQL Injection # Date: 05/02/2012 # Author: Daniel Godoy # Author Mail: DanielGodoy[at]GobiernoFederal[dot]com # Author Web: www.delincuentedigital.com.ar # So...

Electronic Arts Cross Site Scripting

Title: ====== Electronic Arts - Cross Site Scripting Vulnerability Date: ===== 2012-02-06 References: =========== http://www.vulnerability-lab.com/get_content.php?id=367 VL-ID: ===== 367 Introduction: ==...

LibAnalytics Springshare Cross Site Scripting

# Exploit Title: LibAnalytics Springshare Cross Site Scripting # Date: 6.02.2012 # Author: Sony # Software Link: http://springshare.com/libanalytics/ # Web Browser: Mozilla Firefox # Blog: http://st2tea.blog...

Microsoft Internet Explorer 8 Stack Exhaustion