DeDeCMS 5.5 - _SESSION[dede_admin_id] Authentication Bypass

DeDeCMS 5.5 - SESSIONdedeadminid Authentication Bypass source: https://www.securityfocus.com/bid/38469/info DeDeCMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input. Attackers can exploit this issue to gain unauthorized access to the...

ddl cms 2.1 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications ============================================== ddl cms 2.1 Cross Site Scripting Vulnerability ============================================== DDL CMS Dork : Powered by DDL CMS Script Exploit 1- http://Site.com/ddl/blacklist.php?sitename=Xss...

DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net

In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...

Uiga Fan Club index.php SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Uiga Fan Club index.php SQL Injection Vulnerability ===================================================...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

Exploit for unknown platform in category dos / poc =============================================================== Safari 4.0.4 531.21.10 - Stack Overflow/Run Denial of Service =============================================================== !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/r...

Dvbbs PHP 0day-vulnerability warning-the black bar safety net

Affected version: 2.0 File:/boardrule.php The relevant code: function brule global $dv,$db,$boardid,$lang,$groupboardid; $groupboardid=$GET'groupboardid'; if! empty$GET'groupboardid' $rules=$db-scalar"select rules from $dvgroupboard where id=$groupboardid"; else $rules=$db-scalar"select rules fro...

Safari 4.0.4 (531.21.10) - Stack Overflow/Run Denial of Service

No description provided by source. !/usr/bin/perl Safari 4.0.4 531.21.10 - Stack Overflow/run 0Day DoS POC by John Cobb - www.NoBytes.com - 20/01/2010 - v1.0 Tested on WinXP 32bit SP3 Magic Numbers: 114516 - 114718 : Safari quits without error 114719 : Safari quits with illegal operation: AppName...

Cmsez(with easy)the whole Station system of 0day-vulnerability warning-the black bar safety net

Program name: Cmsez Web Content Manage System v2. 0. 0 File: comments.php viewimg.php Code: --------------- ? //comments include "mainfile.php"; $art=new article; //Set $confirm='yes';//yes:need administrator authentication to the display,n is displayed directly $member=new member;...

Orbital Viewer 1.04 SEH Overflow

!/usr/bin/python sinn3r: I'm just submitting this for mrme Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Joomla Component com_paxgallery Blind Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Joomla Component compaxgallery Blind Injection Vulnerability ============================================================= 1 $url = $argv1; $r =...

Orbital Viewer 1.04 - .orb File Local Universal Overflow (SEH)

Orbital Viewer 1.04 - .orb File Local Universal Overflow SEH !/usr/bin/python Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit Date: 27 Feb 2010 CVE: CVE-2010-0688 Download: http://www.orbitals.com/orb/ov.htm Found & exploited by: mrme http://net-ninja.net Greetz to:...

Orbital Viewer v1.04 (.orb) 0day Local Universal SEH Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================================== Orbital Viewer v1.04 .orb 0day Local Universal SEH Overflow Exploit ===================================================================== !/usr/bin/python Orbital Viewer...

FileExecutive v1.0.0 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================= FileExecutive v1.0.0 Multiple Vulnerabilities ============================================= ============================================================================== » FileExecutive...

ESCMS vulnerability website system 0day-vulnerability warning-the black bar safety net

Version:ESCMS V1. 0 SP1 Build 1 1 2 5 Background login authentication is through the admin/check. asp achieved,look at the code % if Request. cookiesCookiesKey"ESadmin"="" then 'Note that here Oh,he is by COOKIE validation ESadmin is empty,we can forge a value,called he is not empty 'CookiesKey i...

Max's Photo Album Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================ Max's Photo Album Shell Upload Vulnerability ============================================ ======================================================================================== | Title : Max's...

OIBlogs local file inclusion vulnerabilities

Exploit for unknown platform in category web applications ============================================ OIBlogs local file inclusion vulnerabilities ============================================ ----------exploit Debut Multiple Remote Vulnerabilities ----------Script Info Script : OIBlogs Download ...

Article Friendly CSRF Vulnerability

Exploit for unknown platform in category web applications =================================== Article Friendly CSRF Vulnerability =================================== Vulnerability found in- Admin module company aksitservices Credit by Pratul Agrawal Site p4ge http://www.articlefriendly.com/...

iPhone FTP Server By Zhang Boyang Remote DoS Exploit

Exploit for unknown platform in category dos / poc ==================================================== iPhone FTP Server By Zhang Boyang Remote DoS Exploit ==================================================== !/usr/bin/perl Exploit: FTP Server By Zhang Boyang - Remote Dos Exploit Date: 24/02/10...

Ero Auktion v2.0 (news.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= Ero Auktion v2.0 news.php SQL Injection Vulnerability =======================================================...

Nero Burning ROM v9.4.13.2 (iso compilation) Local Buffer Invasion PoC

Exploit for unknown platform in category dos / poc ====================================================================== Nero Burning ROM v9.4.13.2 iso compilation Local Buffer Invasion PoC ====================================================================== !/usr/bin/perl Title: Nero Burning...