minimal Gallery 0.8 - Remote File Disclosure

Script : minimal Gallery 0.8 Download : http://minimaldesign.net/downloads/projects/minimal-gallery BUG : Remote File Disclosure Vulnerability Dork : powered by minimal Gallery 0.8 Vulnerable CODE : /mg/php/mgthumbs.php readfile"../$thumbsdir/$thumbcat$thumb"; the variables thumbcat & thumb are...

minimal Gallery 0.8 Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== minimal Gallery 0.8 Remote File Disclosure Vulnerability ======================================================== Script : minimal Gallery 0.8 Download :...

CVE-2008-0232: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to index.php, or the 2 f or t parameters to forums/index.php...

domphp-rfi.txt

DomPHP v0.81 Remote File Inclusion Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.net Script : DomPHP Version : 0.81 Site : http://www.domphp.com Download : http://www.domphp.com/download/cat.php?idcat=1 Vulnerable CODE : /aides/index.php if isset$GET'page'...

DomPHP 0.81 - index.php Remote File Inclusion

DomPHP 0.81 - index.php Remote File Inclusion DomPHP v0.81 Remote File Inclusion Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.net Script : DomPHP Version : 0.81 Site : http://www.domphp.com Download : http://www.domphp.com/download/cat.php?idcat=1 Vulnerable CODE :...

TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

No description provided by source. AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability...

TUTOS 1.3 (cmd.php) Remote Command Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== TUTOS 1.3 cmd.php Remote Command Execution Vulnerability ========================================================== AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net...

Wordpress Plugin Wp-FileManager 1.2 Remote Upload Vulnerability

No description provided by source. AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : Wordpress Plugin Wp-FileManager Download : http://downloads.wordpress.org/plugin/wp-filemanager.1.2.zip...

TUTOS 1.3 - cmd.php Remote Command Execution

TUTOS 1.3 - cmd.php Remote Command Execution AUTHOR : H-T TeaM HouSSaMix ToXiC350 HOME : http://no-hack.net Script : TUTOS Tested in version 1.3 other versions may also be affected. Download : http://www.tutos.org/homepage/index.html BUG : Command Execution Vulnerability | 3xpl0it4t10n -1- :...

Joomla Component PU Arcade Remote <= 2.1.3 SQL Injection Vuln

No description provided by source. Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/...

AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure

AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM Tryag.com/cc, H-T Team , RoMaNcYxHaCkEr , Asb-May's Team...

CVE-2002-2379: Undefined Security Weakness

Cisco AS5350 IOS 12.211T with access control lists ACLs applied and possibly with ssh running allows remote attackers to cause a denial of service crash via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor...

CVE-2002-2340: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via 1 the t parameter or 2 the body of an email response...

CVE-2007-5588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to inject arbitrary web script or HTML via the t parameter in search.cgi, as reachable from search.htm-dist...

CVE-2007-5452: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the 1 ip or 2 t parameter...

xKiosk 3.0.1i (xkurl.php PEARPATH) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== xKiosk 3.0.1i xkurl.php PEARPATH Remote File Inclusion Vulnerability ====================================================================== xKiosk WEB GoLdM = 4ever...

Unfixed XSS vulnerability at www.xentek.co.uk

Security researcher T-Ping, has submitted on 20/09/2007 a cross-site-scripting XSS vulnerability affecting www.xentek.co.uk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently...

Unfixed XSS vulnerability at darksidecommunity.eu

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting darksidecommunity.eu, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/09/2007. It is currentl...

Unfixed XSS vulnerability at www.webx.tv

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.webx.tv, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed...

Unfixed XSS vulnerability at www.maxsoft.ir

Security researcher T-Ping, has submitted on 18/09/2007 a cross-site-scripting XSS vulnerability affecting www.maxsoft.ir, which at the time of submission ranked 3699424 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currentl...