what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 17 of 17

Files from Joaquin Ramirez Martinez

Osticket 1.9.14 Cross Site Scripting

Posted Nov 25, 2016

Authored by Joaquin Ramirez Martinez

Osticket versions 1.9.14 and below X-Forwarded-For stored cross site scripting exploit.

tags | exploit, xss

MD5 | 14551d34ccbbaf09866a1045b887adc9

Download | Favorite | Comments (0)

WordPress Ultimate Product Catalog 3.9.8 SQL Injection

Posted Jul 28, 2016

Authored by Joaquin Ramirez Martinez

WordPress Ultimate Product Catalog plugin versions 3.9.8 and below suffer from a remote unauthenticated blind SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 8e527d8a4cc954193e50d6e4b721af01

Download | Favorite | Comments (0)

WordPress Ultimate Product Catalog 3.8.6 Shell Upload

Posted Jun 23, 2016

Authored by Joaquin Ramirez Martinez

WordPress Ultimate Product Catalog plugin version 3.8.6 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

MD5 | 9972135514f331af513d103bacd45759

Download | Favorite | Comments (0)

WordPress Ultimate Product Catalog 3.8.1 Privilege Escalation

Posted Jun 17, 2016

Authored by Joaquin Ramirez Martinez

WordPress Ultimate Product Catalog plugin versions 3.8.1 and below suffer from a privilege escalation vulnerability.

tags | exploit

MD5 | 0f3fa9a33db0e6b5c7ce2b5ace906a9f

Download | Favorite | Comments (0)

WordPress CP Polls 1.0.8 Cross Site Request Forgery / Cross Site Scripting

Posted Mar 2, 2016

Authored by Joaquin Ramirez Martinez

WordPress CP Polls plugin version 1.0.8 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

MD5 | a8c278ab09ed8b45b25ffdffbae3dc0e

Download | Favorite | Comments (0)

WordPress CP Polls 1.0.8 File Upload / Cross Site Scripting

Posted Mar 2, 2016

Authored by Joaquin Ramirez Martinez

WordPress CP Polls plugin version 1.0.8 suffers from a persistent cross site scripting vulnerability via file upload.

tags | exploit, xss, file upload

MD5 | 35799603b69fe6d77b709b4eb08e9805

Download | Favorite | Comments (0)

WordPress CP Polls 1.0.8 Malicious File Download

Posted Mar 2, 2016

Authored by Joaquin Ramirez Martinez

WordPress CP Polls plugin version 1.0.8 suffers from a cross site request forgery vulnerability that can be leveraged to turn a file download into a malicious .bat file.

tags | advisory, csrf

MD5 | dbe083b893e422705f8ab69a8273cc3f

Download | Favorite | Comments (0)

WordPress Calculated Fields Form 1.0.x Session Hijacking

Posted Feb 24, 2016

Authored by Joaquin Ramirez Martinez

WordPress Calculated Fields Form plugin versions 1.0.x and below suffer from Http_only bypass and session hijacking vulnerabilities.

tags | exploit, vulnerability

MD5 | bd3aff22ee6ea239445f0e548eabc528

Download | Favorite | Comments (0)

WordPress Booking Calendar Contact Form 1.0.23 Shortcode SQL Injection

Posted Feb 8, 2016

Authored by Joaquin Ramirez Martinez

WordPress Booking Calendar Contact Form plugin versions 1.0.23 and below suffer from a remote shortcode blind SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 25f2be1726829e418b22af60a9e6ec75

Download | Favorite | Comments (0)

WordPress Booking Calendar Contact Form 1.0.23 Blind SQL Injection

Posted Feb 8, 2016

Authored by Joaquin Ramirez Martinez

WordPress Booking Calendar Contact Form plugin versions 1.0.23 and below suffer from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 247430b519f3f9c0bf0fff1c088c7ee7

Download | Favorite | Comments (0)

WordPress Booking Calendar Contact Form 1.0.23 CSRF / XSS

Posted Feb 8, 2016

Authored by Joaquin Ramirez Martinez

WordPress Booking Calendar Contact Form plugin versions 1.0.23 and below suffer from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

MD5 | 9f85a6ed1472ccdc80fb5f6d3b6ff3ff

Download | Favorite | Comments (0)

WordPress Appointment Booking Calendar 1.1.24 SQL Injection

Posted Jan 28, 2016

Authored by Joaquin Ramirez Martinez

WordPress Appointment Booking Calendar plugin version 1.1.24 suffers from a remote SQL injection through addslashes.

tags | exploit, remote, sql injection

MD5 | dc109c54c46b5d81e40f932214d18ae9

Download | Favorite | Comments (0)

WordPress Appointment Booking Calendar 1.1.24 Escalation / XSS

Posted Jan 28, 2016

Authored by Joaquin Ramirez Martinez

WordPress Appointment Booking Calendar plugin versions 1.1.24 and below suffer from privilege escalation and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

MD5 | 3b41e7c8b5e211ddc5a7cd4db6062f3f

Download | Favorite | Comments (0)

WordPress Appointment Booking Calendar 1.1.23 Shortcode SQL Injection

Posted Jan 26, 2016

Authored by Joaquin Ramirez Martinez

WordPress Appointment Booking Calendar plugin versions 1.1.23 and below suffer from a shortcode remote SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 43a554bb1fe05c73f363f9e83707cf5b

Download | Favorite | Comments (0)

WordPress Appointment Booking Calendar 1.1.23 SQL Injection

Posted Jan 25, 2016

Authored by Joaquin Ramirez Martinez

WordPress Appointment Booking Calendar plugin versions 1.1.23 and below suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

MD5 | 598fbbaed428150cfe7361ebe978d468

Download | Favorite | Comments (0)

WordPress Contact Form Generator 2.0.1 CSRF

Posted Sep 5, 2015

Authored by Joaquin Ramirez Martinez

WordPress Contact Form Generator version 2.0.1 suffers from multiple cross site request forgery vulnerabilities.

tags | exploit, vulnerability, csrf

systems | linux

MD5 | 4149fca7d0eeac186b44661f95677ab5

Download | Favorite | Comments (0)

WordPress Booking Calendar Contact Form 1.0.2 XSS / SQL Injection

Posted May 13, 2015

Authored by Joaquin Ramirez Martinez

WordPress Booking Calendar Contact Form plugin version 1.0.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

MD5 | f602e3e29e0434b553acff27c0d74ea5

Download | Favorite | Comments (0)