what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from tomplixsee

phpMyFAQ 2.9.9 Code Injection

Posted Nov 17, 2017

Authored by tomplixsee

phpMyFAQ version 2.9.9 suffers from an issue where an administrative account can execute arbitrary code on the server by modifying LANG_CONF[main.metaDescription].

tags | exploit, arbitrary

SHA-256 | a6d03297b6d015d54d53b8b82104789e4468707199c9c312ad5200a4beca9306

Download | Favorite | View

WordPress Ultimate Product Catalog 4.2.24 PHP Object Injection

Posted Oct 30, 2017

Authored by tomplixsee

WordPress Ultimate Product Catalog plugin versions 4.2.24 and below suffer from a PHP object injection vulnerability.

tags | exploit, php

SHA-256 | 3a32c416cc40f0d2746a5880bfd6ee9b498b22a31a88ccef544429ac5814521e

Download | Favorite | View

Orangescrum 1.6.1 File Upload / Cross Site Scripting

Posted Jul 17, 2017

Authored by tomplixsee

Orangescrum version 1.6.1 suffers from cross site scripting and remote file upload vulnerabilities.

tags | exploit, remote, vulnerability, xss, file upload

SHA-256 | 106418e31fa4cbf360e7471d81c2df8932c71452c44b9ba4675115930b0547d9

Download | Favorite | View

simple32-xss.txt

Posted Jan 28, 2008

Authored by tomplixsee

Simple Forum version 3.2 suffers from file disclosure and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | c519964329b114e8d760a77e6a685612e9b12ead3d55187f74e177968841bad4

Download | Favorite | View

alitalk-multi.txt

Posted Jan 17, 2008

Authored by tomplixsee

ALITALK version 1.9.1.1 suffers from severe remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, sql injection

SHA-256 | e72f4f0993335bce4ad2605189a21e4ae4b90da1360217cd3c030f2263f55c0e

Download | Favorite | View

projectalumni-disclose.txt

Posted Nov 28, 2007

Authored by tomplixsee

Project Alumni version 1.0.9 suffers from a remote file disclosure vulnerability.

tags | exploit, remote, info disclosure

SHA-256 | 4ee50a5fa4c645d2e4a04e376723b53460b3aa67f030261ddcb53559cc9fbaca

Download | Favorite | View

projectalumni-sqlxss.txt

Posted Nov 26, 2007

Authored by tomplixsee

Project Alumni versions 1.0.9, 1.0.8, and possibly prior releases suffer from cross site scripting and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | ac4295d45d89f5c92cf220bd4f9ff1addec222418dbd42811ba1402402e576dc

Download | Favorite | View