1942 matches found
exV2 <= 2.0.4.3 - (sort) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ------------------------------------------------------------------------------- exV2 = 2.0.4.3 sort SQL injection / administrative credentials disclosure exploit mail: [email protected] site:...
AJ Auction <= 6.2.1 - (classifide_ad.php) SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ AJ Auction = 6.2.1 classifidead.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==...
Web Wiz Site News 3.6 Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7341/info Web Wiz Site News has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Site News...
Critical Path InJoin Directory Server 4.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4717/info Critical Path provides an LDAP Lightweight Directory Access Protocol Directory Server called InJoin. InJoin Directory is provided for Microsoft Windows operating systems and Unix variants. HTML code is not...
PAPOO <= 3_RC3 SQL Injection/Admin Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PAPOO = 3RC3 SQL injection / admin credentials disclosure\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Help Contact Imprint Sitemap\ | \powered by papoo\ | \powered by c...
osCommerce 2.3.3.4 - (geo_zones.php, zID param) - SQL Injection Vulnerability
No description provided by source. Title: osCommerce v2.x SQL Injection Vulnerability Dork: Powered by osCommerce Author: Ahmed Aboul-Ela Contact: ahmed.aboul3laatgmaildotcom - http://twitter.com/secgeek Vendor : http://www.oscommerce.com Version: v2.3.3.4 current latest release and prior version...
PowerScripts PlusMail WebConsole 1.0 Poor Authentication Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and passwor...
Buffalo WZR-HP-G300NH2 - CSRF Vulnerability
No description provided by source. Exploit Title: Buffalo WZR-HP-G300NH2 CSRF Vulnerability Author: Prayas Kulshrestha E-mail: [email protected] Category: Hardware Google Dork: N/A Date: 06/10/2013 Vendor: http://www.buffalotech.com Model: WZR-HP-G300NH2 Firmware Version: DD-WRT...
LifeType <= 1.0.4 - SQL Injection / Admin Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo LifeType = 1.0.4r3270 SQL injection / admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo dork: \Powered by LifeType\ \RSS 0.90\ \RSS 1.0\ \RSS 2.0...
phpvidz 0.9.5 Administrative Credentials Disclosure
No description provided by source. Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative Credentials Disclosure Vendor's Homepage: http://sourceforge.net/projects/phpvidz/ phpvidz does not use a SQL database. Instead it uses a system of flat files to maintain applicati...
ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo ATutor = 1.5.3.1 'links' blind SQL injection / admin credentials disclosure\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork, version specific: \Web site engine's code is...
McKesson Pathways Homecare 6.5 Weak Username and Password Encryption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3653/info McKesson Pathways Homecare is a client/server application which is used to track patient information, billing information and medical records for home care patients. The administrative username and password are...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
No description provided by source. !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook = 5.5 And possible higher could not find a site to test it on This exploit shows the username of the administrator and the password In plain text Bug Found by muderskillz Coded by Zodiac Shouts to...
VMware Hyperic HQ Groovy Script-Console Java Execution
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
webSPELL <= 4.01.02 Remote PHP Code Execution Exploit
No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; Admin id: 1 Admin hash: 7b24afc8bc80e548d66c4e7ff72171c5 Logged in wsauth=1%3A7b24afc8bc80e548d66c4e7ff72171c5 Trying to upload the malicious file Done http://localhost/webspell4.01.02/downloads/c99shell.php if$ar...
PHP-Coolfile 1.4 Unauthorized Administrative Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9018/info PHP-Coolfile allows unauthorized administrative access due to an error in the way access is evaluated in the action.php file. This could allow a remote user to obtain the administrative username and password for...
FaScript FaName 1.0 - (page.php) Remote SQL Injection Vulnerability
No description provided by source. FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id=SqL Code Help : In This Script Admin Username and Password Save in...
Etomite CMS <= 0.6.1.2 (manager/index.php) Local File Include Exploit
No description provided by source. !/usr/bin/perl -w Etomite CMS Remote Command Execution Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: Input passed to the 'f' parameter in /manager/index.php isn't properly verified before being used in an include...
Islamnt Islam Forum Script 1.2 - Blind SQL Injection Exploit
No description provided by source. ?php / --------------------------------------------------------------- Islamnt = Remote Blind SQL Injection Exploit by s3n4t00r --------------------------------------------------------------- Author...............: s3n4t00r Home.................: Sec-w.com...
PHP-Fusion <= 6.00.306 (srch_where) SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHP-Fusion = v6.00.306 \srchwhere\ SQL Injection/Admin credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; if $argc5 echo Usage: php .$argv0. host path use...