3061 matches found
Enthrallweb emates 1.0 - 'newsdetail.asp' SQL Injection
!/usr/bin/perl Script Name: Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 119.40 USD .. : ajann,Turkey use IO::Socket; if@ARGV newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die...
CVE-2006-6377
CVE-2006-6377 contributes a remote-access issue in Uploadscript 1.2 and earlier. The description states that sensitive data is stored under the web root with insufficient access control, enabling remote attackers to obtain the admin password hash by directly requesting /password.txt. The NVD note...
phpGraphy 0.9.12 - Privilege Escalation / Commands Execution
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n";...
Cahier de texte V2.0 SQL Code Execution Exploit
!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Cahier de texte V2.0 Poc.ID........: 15061124 Type..........: Predictable backup filename, Source disclosure Risk.level....: High Conditions....: registerglobals = on Src.download..: www.etab.ac-caen.fr/bsauveur/cahierdetexte/ Poc.link........
Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability
No description provided by source. Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...
Yener Haber Script v2.0 SQL injection
BiyoSecurity.Org script name : Yener Haber Script v2.0 Demo : http://www50.brinkster.com/yenerturk Risk : High Regards : DjReMix Thanks : Korsan , Liz0zim , TRIP Exploit : http://victim.com/?x=2&kategori=11&id=-120union+select+id,kullaniciadi,sifre,4,5,6,7,8,9+from+admin Admin Pass Displayed :=...
Netopia Router Crafted SNMP Request Remote Admin Password Disclosure
The remote host appears to be running a Netopia router with SNMP enabled. Further, the Netopia router is using the default SNMP community strings. This version of the Netopia firmware is vulnerable to a flaw wherein a remote attacker can, by sending a specially formed SNMP query, retrieve the...
CMtextS 1.0 - users_loginsadmin.txt Credentials Disclosure
CMtextS 1.0 - usersloginsadmin.txt Credentials Disclosure ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +...
CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln
No description provided by source. ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...
CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln
Exploit for unknown platform in category web applications =================================================================== CMtextS = 1.0 userslogins/admin.txt Credentials Disclosure Vuln =================================================================== ::::::::: :::::::::: ::: ::: ::::::::::...
CMtextS 1.0 - '/users_logins/admin.txt' Credentials Disclosure
::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++ +++:++ +++:++++: ++ +:+ ++ ++ ++ +...
GNUTURK <= 2G (t_id) Remote SQL Injection Exploit
No description provided by source. ? / ------------------------------------------------------------------------------------------------------------ --------Gnu turk all versions simple get admin uname & pass without hash blind sql injection exploit--------------- -------------Powered by p2y...
haberx.txt
+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...
Haberx 1.02 1.1 - tr SQL Injection
Haberx 1.02 1.1 - tr SQL Injection +++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download:...
Haberx v1.1 (tr) SQL Injection Vulnerability
+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...
CVE-2006-4772
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc...
CVE-2006-4772
HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc...
hotplugCMSconfig.txt
Hello HotPlug CMS Config File Include Vulnerability Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] After Script Url Add includes/class/config.inc And you will download the config file ,, so that you will be able to connect by remote connect...
CVE-2006-4653
1 Amazing Little Poll and 2 Amazing Little Picture Poll store sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password via a direct request for the lpsettings file lpsettings.inc or lpsettings.php...
CVE-2006-4653
The CVE-2006-4653 entry concerns two WordPress-like poll components, “Amazing Little Poll” and “Amazing Little Picture Poll,” which expose the admin password by serving the lp_settings files (lp_settings.inc or lp_settings.php) from the web root due to insufficient access control. The vulnerabili...