what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 55

Files from AmnPardaz Security Research Team

Joomla JCE 2.0.10 Shell Upload

Posted Oct 12, 2011

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Joomla JCE component version 2.0.10 shell uploading exploits written in PHP and Perl.

tags | exploit, shell, perl, php

SHA-256 | d1b4ac29ebde769a56c277231425f66928d9b1ae143eb1a76b6b2460dab7671a

Download | Favorite | View

Joomla JCE 2.0.10 Path Traversal / Path Manipulation

Posted Aug 28, 2011

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Joomla JCE extension versions 2.0.10 and below suffer from path manipulation and path traversal vulnerabilities.

tags | exploit, vulnerability, file inclusion

SHA-256 | 1c9a1984066a24c83d5305df2dc14da88d2d9c5765c62453186cb360cd53dd14

Download | Favorite | View

Ferdows CMS 9.0.5 / Ferdows CMS Pro 1.1.0 SQL Injection / XSS

Posted Jul 12, 2011

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Ferdows CMS Pro versions 1.1.0 and below and Ferdows CMS versions 9.0.5 and below suffer from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 3559b41dd26cb3dc3a35867ec55cf53e9055a014b63f1abcf5469010128be08f

Download | Favorite | View

Adobe LiveCycle ES DLL Hijacking

Posted Sep 14, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Adobe LifeCycle ES suffers from a DLL hijacking vulnerability. Version 8.2.1.3144.1.471865 is affected.

tags | exploit

SHA-256 | 914e1a72e1c256b433639de5c3f194323f110b316851fca137768699e16c0a9b

Download | Favorite | View

chillyCMS 1.1.3 SQL Injection / Cross Site Scripting

Posted Sep 6, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

chillyCMS version 1.1.3 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 62c5eca9056d5594ea4c48543b57df55bb886ef623345260a6f6e211851ff6b8

Download | Favorite | View

ACollab 1.2 SQL Injection

Posted Aug 17, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

ACollab version 1.2 suffers from authentication bypass and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | db1a2e7da61e19a88347aefa9af1917023bc4ac0b6b53124cd929a5837863b10

Download | Favorite | View

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

Posted May 25, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Blaze Apps versions 1.4.0.051909 and below suffer from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | e50cfb5a7c55363e883da8fcb53405daff31fc0955813d7e4cdec96d61685bb1

Download | Favorite | View

AneCMS 1.0 Code Execution / Local File Inclusion

Posted Apr 14, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

AneCMS version 1.0 suffers from code execution and local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, code execution, file inclusion

SHA-256 | a7a42b0ae756378c207f0c6956eaa4dfcd147c6e4b17fd6e58155d7d156c28dd

Download | Favorite | View

Ananta Gazelle 1.0 SQL Injection

Posted Mar 15, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Ananta Gazelle version 1.0 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 6d03cb4a7390a2123d43ed675216a0f832c590db934ad3d99c7916a88122fa67

Download | Favorite | View

1024 CMS 2.1.1 Blind SQL Injection

Posted Mar 3, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

1024 CMS version 2.1.1 suffers from a remote blind SQL injection vulnerability.

tags | advisory, remote, sql injection

SHA-256 | 9724c67e794c2377a5432c37ce4f57b88f8f80cfd1498dc8df827028799be722

Download | Favorite | View

SphereCMS 1.1 Alpha Blind SQL Injection

Posted Feb 19, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

SphereCMS version 1.1 Alpha suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 9431cbe88f2428736d7c267ae83535ba81f25462355a52476e9c29052d518294

Download | Favorite | View

Tinypug 0.9.5 Cross Site Request Forgery / Cross Site Scripting

Posted Feb 3, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Tinypug versions 0.9.5 and below suffer from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | a01fc3dd1197cdeee84f6202482ccc79cdcb7aa9e0ce6801fe528afbb637238b

Download | Favorite | View

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

Posted Jan 20, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Blaze Apps versions 1.4.0.051909 and below suffer from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 78710e3daf90732f6475fb0288c6563d5ec21f8b3e5b4b8278c2e04ac7dcdaa1

Download | Favorite | View

ezContents CMS 2.0.3 Bypass / SQL Injection

Posted Jan 20, 2010

Authored by AmnPardaz Security Research Team | Site bugreport.ir

ezContents CMS versions 2.0.3 and below suffer from bypass and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | d199e4b6182bf67f4281677eb5f84cdd498291c9c4dc8b15050808b11813c98a

Download | Favorite | View

SASPCMS 0.9 XSS / SQL Injection / Disclosure

Posted Apr 8, 2009

Authored by AmnPardaz Security Research Team | Site bugreport.ir

SASPCMS version 0.9 suffers from cross site scripting, database disclosure, and authentication bypass via SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection, bypass

SHA-256 | 05b5258b2a47064aa511a4eff88d7f81293cc1c1d37a3748ae10083d39fbef5a

Download | Favorite | View

PHPRunner 4.2 SQL Injection

Posted Mar 17, 2009

Authored by AmnPardaz Security Research Team | Site bugreport.ir

PHPRunner version 4.2 suffers from a blind SQL injection vulnerability.

tags | exploit, sql injection

SHA-256 | 44c58fa67026b31749f522e5cfedebe9bf694e2383c50c85de0b85943a09be3d

Download | Favorite | View

NewsCMSlite Insecure Cookie Handling

Posted Jan 27, 2009

Authored by AmnPardaz Security Research Team | Site bugreport.ir

NewsCMSlite suffers from an insecure cookie handling vulnerability.

tags | exploit, insecure cookie handling

SHA-256 | 7049b3b902170f6c0170a6a9d39a6f8e67bb66351e2b4ae950ee8adcd9b10ed4

Download | Favorite | View

phpList 2.10.8 Local File Inclusion

Posted Jan 15, 2009

Authored by AmnPardaz Security Research Team | Site bugreport.ir

phpList version 2.10.8 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | 1eb55150b3a06e1d12a2efbf61d6588802763badec0178d47fe489fdc179b69f

Download | Favorite | View

chicomas 2.0.4 XSS / Database Disclosure

Posted Dec 30, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

chicomas versions 2.0.4 and below suffer from cross site scripting and database disclosure vulnerabilities.

tags | exploit, vulnerability, xss, info disclosure

SHA-256 | 1b8f18a6119696049fa61d70058a2a3e5bd969f4ce3c9ad0e262db1258a56d73

Download | Favorite | View

CFAGCMS Remote File Inclusion

Posted Dec 15, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

CFAGCMS suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | af870e09e20f35b4563b1b224723b361683cbb8057a52946f0a1fe2c5b8ef096

Download | Favorite | View

enthusiast-exec.txt

Posted Nov 9, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Enthusiast version 3.1.4 suffers from a remote code execution vulnerability.

tags | exploit, remote, code execution

SHA-256 | 348e9e6a52277a58feca1ac07f0794a550b7596b64279ec1bd0f72cacdad7d42

Download | Favorite | View

persiabme-sql.txt

Posted Oct 27, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Persia BME E-Catalogue suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c019abec357a7ce5be9fdd0ccb4347531afec13f1c3d559afc9f018329196f8a

Download | Favorite | View

cmme-disclose.txt

Posted Oct 7, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

CMME versions 1.19 and below suffer from multiple information disclosure vulnerabilities.

tags | exploit, vulnerability, info disclosure

SHA-256 | b62d4abd45cab06138e257c5395692616e08476daadcb599bd04499146b61b06

Download | Favorite | View

parsawebcms-sql.txt

Posted Sep 28, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

ParsaWeb CMS suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c8e02ffce81a8e62b70464dcdb69e77fa2ebc106d85d3b807c38e7be71983e8c

Download | Favorite | View

masir-sql.txt

Posted Sep 8, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Masir Camp E-Shop Module versions 3.0 and below suffer from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | ab372eeb5e1b3e6d62a0e86f1109c5cedf1a2a638373f36895a552b1b806331a

Download | Favorite | View