what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 38

Files from Hubert Wojciechowski

e107 2.3.2 Cross Site Scripting

Posted May 24, 2023

Authored by Hubert Wojciechowski

e107 version 2.3.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | a6b456793e5bb9514494489b12e17a5e039c2a8073ea5fab19e598715d39fbd8

Download | Favorite | View

WebTareas 2.4 SQL Injection

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

WebTareas version 2.4 suffers from a remote blind SQL injection vulnerability. Original discovery of this issue in this version is attributed to Behrad Taher in May of 2022. Related CVE number: CVE-2021-43481.

tags | exploit, remote, sql injection

SHA-256 | 227f751b494a8526993c807c6a09642bdde18c4570a2c251b1b157fa94d369f3

Download | Favorite | View

WebTareas 2.4 Cross Site Scripting

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

WebTareas version 2.4 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 813491c88e8a5846d163a6f81ec121117f5e924631af78f81671e4d9e87dce95

Download | Favorite | View

WebTareas 2.4 Shell Upload

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

WebTareas version 2.4 suffers from a remote shell upload vulnerability.

tags | exploit, remote, shell

SHA-256 | eda323c318ad8fffa94b89ae2c95e9b9d5f2357f04e724bc7eabff0037f403b2

Download | Favorite | View

Atom CMS 2.0 SQL Injection

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

Atom CMS version 2.0 suffers from a remote SQL injection vulnerability. Original discovery of this issue in this version is attributed to Luca Cuzzolin in February of 2022.

tags | exploit, remote, sql injection

SHA-256 | 560dde230303d063927a07f746c0f31a5c0578ab47d9adf0eb6f18b03bd4f150

Download | Favorite | View

Aero CMS 0.0.1 Remote Shell Upload

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

Aero CMS version 0.l0.1 remote shell upload exploit. Original discovery of this issue in this version is attributed to D4rkP0w4r in April of 2022.

tags | exploit, remote, shell

SHA-256 | a35219f9e6755006eaad3eec1f5ef104ed7890f3cc5a3b7b4be0b1043d4dc2be

Download | Favorite | View

Aero CMS 0.0.1 SQL Injection

Posted Mar 27, 2023

Authored by Hubert Wojciechowski

Aero CMS version 0.0.1 suffers from multiple remote SQL injection vulnerabilities. Original discovery of this issue in this version is attributed to nu11secur1ty in August of 2022.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | f6a9385e6ed885e833628974880b8b656154a8d37009525d195e3963fa66ac50

Download | Favorite | View

e107 CMS 3.2.1 Arbitrary File Upload / Cross Site Scripting

Posted May 11, 2022

Authored by Hubert Wojciechowski

e107 CMS version 3.2.1 suffers from cross site scripting and arbitrary file upload vulnerabilities that can allow for a shell upload.

tags | exploit, arbitrary, shell, vulnerability, xss, file upload

SHA-256 | 3ae8caceae21f93d20493507ca607ad9781c300dc643e858c7c2ac8aa48b23b5

Download | Favorite | View

Orangescrum 1.8.0 Privilege Escalation

Posted Nov 29, 2021

Authored by Hubert Wojciechowski

Orangescrum version 1.8.0 suffers from a privilege escalation vulnerability.

tags | exploit

SHA-256 | c8c7f43730e3d76d57c14dd79b7de6777f9c15f990b2d77ec8733b0f1c8adc65

Download | Favorite | View

Orangescrum 1.8.0 SQL Injection

Posted Nov 29, 2021

Authored by Hubert Wojciechowski

Orangescrum version 1.8.0 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | ee836ffb8ac4c8f04caa3e9f4ba0532ab1071de3f53ff4d1759481a59c64dc5c

Download | Favorite | View

Orangescrum 1.8.0 Cross Site Scripting

Posted Nov 29, 2021

Authored by Hubert Wojciechowski

Orangescrum version 1.8.0 suffers from reflective and persistent cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 086abb0c5e3fa09d0deee6332c6925901258a976ee960fd564771e04be6e288f

Download | Favorite | View

Opencart 3.0.3.8 Session Injection

Posted Nov 29, 2021

Authored by Hubert Wojciechowski

Opencart version 3.0.3.8 suffers from a session injection vulnerability.

tags | exploit

SHA-256 | 561fd8e448b1a816549d320dca97e950c1f9fa221646cdb868f4a98f0da0d041

Download | Favorite | View

Online Traffic Offense Management System 1.0 Privilege Escalation

Posted Oct 8, 2021

Authored by Hubert Wojciechowski

Online Traffic Offense Management System version 1.0 suffers from a privilege escalation vulnerability.

tags | exploit

SHA-256 | d213a8cbfee96075b72456e3065391f9b62d23e60338928c5d686df9c6e2c2d3

Download | Favorite | View

Online Traffic Offense Management System 1.0 SQL Injection

Posted Oct 7, 2021

Authored by Hubert Wojciechowski

Online Traffic Offense Management System version 1.0 suffers from multiple unauthenticated remote SQL injection vulnerabilities. Original discovery of SQL injection in this version is attributed to Justin White in August of 2021.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | 7cc05456c41b598b673942619347e3fd1ef4bb3aec178caa9dc6af5ba949d971

Download | Favorite | View

Online Traffic Offense Management System 1.0 Cross Site Scripting

Posted Oct 7, 2021

Authored by Hubert Wojciechowski

Online Traffic Offense Management System version 1.0 suffers from persistent and reflective cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 8fe47efe4ae3e273d70f6a28bc37866a5974f0a4d07c32cd8529fa977f8ef09e

Download | Favorite | View

Online Traffic Offense Management System 1.0 Shell Upload

Posted Oct 7, 2021

Authored by Hubert Wojciechowski

Online Traffic Offense Management System version 1.0 suffers from multiple remote shell upload vulnerabilities.

tags | exploit, remote, shell, vulnerability

SHA-256 | f12a952b62540fdd484377f26c5406d160c2eefe9cbf56553111f4570c03f894

Download | Favorite | View

Inoutmail Webmail CMS 2012 Cross Site Scripting

Posted Aug 7, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Inoutmail Webmail CMS 2012 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | d8b9e67d54c9d90d74f9052a85dac0ea25191ec820d9607b7be90a978e3b1ab3

Download | Favorite | View

Event Calendar PHP 1.2 Cross Site Scripting / SQL Injection

Posted Jul 16, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Event Calendar PHP version 1.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, xss, sql injection

SHA-256 | 3ad4f5c685a677a797142b6d779de69baf513ebfcb1464004b838916e0b78d0f

Download | Favorite | View

Funeral Script PHP Cross Site Scripting / SQL Injection

Posted Jul 12, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Funeral Script PHP suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, xss, sql injection

SHA-256 | f5dc5ac3841f8cceb719e7a7baf8aea26b328f66f2b656914154e29121b8fd4c

Download | Favorite | View

Classifieds Ads Script PHP 1.1 SQL Injection

Posted Jul 5, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Classifieds Ads Script PHP version 1.1 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, sql injection

SHA-256 | 031f8444dc9bb3fb64965abde0479ba420c5792fb922e32d4cc4692a9efc8683

Download | Favorite | View

GuestBook Scripts PHP 1.5 Cross Site Scripting / SQL Injection

Posted Jul 5, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

GuestBook Scripts PHP version 1.5 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, xss, sql injection

SHA-256 | 9b4db8ef1d37f9ab481fd0462d19541bdffd9a624fb896d51f3c537e6be7243c

Download | Favorite | View

Event Script PHP CMS 1.1 SQL Injection

Posted Jul 5, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Event Script PHP CMS version 1.1 suffers from multiple remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, sql injection

SHA-256 | b4ea2c8291eef176dcb4692e33a55c32bca11c42097bbc2d66d036a17833ef60

Download | Favorite | View

Webify Product Series Local File Inclusion / Cross Site Scripting

Posted Jun 16, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

The Webify Product Series suffers from local file inclusion and cross site scripting vulnerabilities.

tags | exploit, local, vulnerability, xss, file inclusion

SHA-256 | 2a67be0d5c39f749966f7b9ea32d0ce14692d898172fdc0bdac9600fc2d27a37

Download | Favorite | View

News Script PHP 1.2 Cross Site Scripting / SQL Injection

Posted Jun 16, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

News Script PHP version 1.2 suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, php, vulnerability, xss, sql injection

SHA-256 | 4f91b96444d9a7ad5e3bf14091e749f2a203bd78d3759a7e97e27059e8181b15

Download | Favorite | View

Cells Blog CMS 1.1 SQL Injection / Cross Site Scripting

Posted Jun 14, 2012

Authored by Hubert Wojciechowski, Vulnerability Laboratory | Site vulnerability-lab.com

Cells Blog CMS version 1.1 suffers from remote SQL injection and cross site scripting vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | 0effa93810aae7982a7ab048e47ddd1e8824aa56bd49be008f389b1d606b70ab

Download | Favorite | View