841 matches found
phpTournois <= G4 Remote File Upload/Code Execution Exploit
?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not...
Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities
No description provided by source. Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities RFI/XSS/RCE by Florinu ------------ djflorinuatyahoodotcom 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals must to be: ON Vuln code: ?php / Name: Syntax Highlight / includeonce...
GROUP-E 1.6.41 (head_auth.php) Remote File Inclusion Vulnerability
No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rise...
GROUP-E 1.6.41 - head_auth.php Remote File Inclusion
GROUP-E 1.6.41 - headauth.php Remote File Inclusion ???????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The...
Wordpress Plugin Sniplets 1.1.2 (RFI/XSS/RCE) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== Wordpress Plugin Sniplets 1.1.2 RFI/XSS/RCE Multiple Vulnerabilities ====================================================================== Wordpress Plugin Sniplets...
WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution
WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion Cross-Site Scripting Remote Code Execution Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/...
WordPress Plugin Sniplets 1.1.2 - Remote File Inclusion / Cross-Site Scripting / Remote Code Execution
Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...
wordpresssniplet-rfixssexec.txt
Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities by NBBN 1 Remote File Inclusion File: /modules/syntaxhighlight.php Register Globals: ON Vuln code: "/ http://victim.tld/wordpress/wp-content/plugins/sniplets/view/admin/pager.php?page=%22%3E%3Cscript%3Ealert%22XSS%22%3C/script%3E 3 Remote...
PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion
??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...
allclub-lfi.txt
Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...
OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ OpenSiteAdmin = 0.9.1.1 Multiple File Inclusion Vulnerabilities ================================================================ Software Vulnerable: OpenSiteAdmin 0.9.1 BETA...
All Club CMS <= 0.0.1f index.php Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== All Club CMS pepepistola, musashi, patoruzu, ElvisPresley and sky Yashira.org-- PescaoDeth, Garcez, Crackneo, alexhk23 and all users of yashira as dapaf, elmanguan, etc...
Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites
Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...
wpfootnotes-multi.txt
Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...
seagull-063-xss.txt
fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: Seems that none of the theme css renderers sanatize...
deluxebb-xss.txt
Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=alert"XSS"...
DeluxeBB 1.1 XSS Vulnerabilitie
Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=scriptalert"XSS"/script...
FreeBSD : drupal -- XSS (register_globals) (f0fa19dd-c060-11dc-982e-001372fd0af2)
The Drupal Project reports : When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupal's .htaccess attempts to set registerglobals to disabled and...
Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX shipnx AT yahoo com Impact: Remote file include Status: Patch not...
mas-rfi.txt
---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX Impact: Remote file include Status: Patch not available...