Crux Gallery 1.32 - Insecure Cookie Handling

Crux Gallery 1.32 - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Crux Gallery eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl scrip...

The Gemini Portal 4.7 - Insecure Cookie Handling

The Gemini Portal 4.7 - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simp...

Crux Gallery <= 1.32 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =========================================================== Crux Gallery Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and...

The Gemini Portal <= 4.7 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =============================================================== The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

The Gemini Portal 4.7 - Insecure Cookie Handling

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- The Gemini Portal eNYe-Sec - www.enye-sec.org Program description by the author website Bug Exploit Note: POST is not checked and you can enter all by GET. Also you can create a simple perl script to send GET and POST packages. Fir...

CVE-2008-4162

Open redirect vulnerability in admin/auth.php in NooMS 1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the gsiteurl parameter...

Sagem Routers [email protected] Remote CSRF Exploit (dhcp hostname attack)

Exploit for hardware platform in category remote exploits ============================================================= Sagem Routers email protected Remote CSRF Exploit dhcp hostname attack ============================================================= !/usr/bin/env python OOO OOO OO OOO O O O O ...

jportal2humor-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

plaincart-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

Plaincart 1.1.2 (p) Remote SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...

jPORTAL 2 - 'humor.php' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

Plaincart 1.1.2 - p SQL Injection

Plaincart 1.1.2 - p SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE...

jPORTAL 2 (humor.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== jPORTAL 2 humor.php id Remote SQL Injection Vulnerability =========================================================== Title: jPORTAL 2 humor.php SQL Injection VEndor:...

Plaincart 1.1.2 (p) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== Plaincart 1.1.2 p Remote SQL Injection Vulnerability ====================================================== Title: PlainCart index.php SQL Inj Script Download:...

DUgallery - ALL VERSIONS &#40;Upload/SQL/&#41; Multiple Remote Vulnerabilities

DUgallery - ALL VERSIONS! Discovered bay : AleminKrali my blog: al3m.blogspot.com inurl:pic.asp?iCat= inurl:cat.asp?iCat= - 1-Upload Bug HIGH!!! 75 success new! 1-OPEN firefox 2-tools options content JavaScript Not Active! and save.re open firefox. http://site.com/path/add.asp == upload your Asp...

jPORTAL 2 (humor.php id) Remote SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...

jPORTAL 2 - humor.php SQL Injection

jPORTAL 2 - humor.php SQL Injection . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE...

Plaincart 1.1.2 - 'p' SQL Injection

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

pLink 2.07 (linkto.php id) Remote Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' pLink 2.07 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Dork: intext:"pLink 2.07" Admin Panel: Target/link/ Usage: php '.$argv0.' Target Userid Example...