8541 matches found
X7 Chat 2.0 - help_file Remote Command Execution
X7 Chat 2.0 - helpfile Remote Command Execution !/usr/bin/php -q -d shortopentag=on works regardless of magicquotesgpc settings\r\n"; echo " if avatar uploads are enabled default\r\n"; echo "dork: intitle:"X7 Chat Help Center" | "Powered By X7 Chat"\r\n\r\n"; if $argc4 echo "Usage: php...
X7 Chat 2.0 - 'help_file' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on works regardless of magicquotesgpc settings\r\n"; echo " if avatar uploads are enabled default\r\n"; echo "dork: intitle:"X7 Chat Help Center" | "Powered By X7 Chat"\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host:...
X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ============================================================ X7 Chat works regardless of magicquotesgpc settings\r\n"; echo " if avatar uploads are enabled default\r\n"; echo "dork: intitle:"X7 Chat Help Center" | "Powered By X7...
PCPINChat-5.0.4.txt
!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR login = "" or isnull1/0/ AND password = "somehash" AND activated = "1" LIMIT 1 ii arbitrary local inclusion: now you can upload smilies with php code inside, we...
CVE-2006-1962
SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field login parameter to main.php...
CVE-2006-1963
Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." dot dot in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code...
Directory traversal
Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." dot dot in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code...
Sql injection
SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field login parameter to main.php...
CVE-2006-1963
CVE-2006-1963 affects PCPIN Chat 5.0.4 and earlier. A directory traversal flaw in main.php allows remote authenticated users to include and execute arbitrary PHP code by manipulating a language cookie (demonstrated via a smiliefile image that contains PHP code). The root cause is unsafely handlin...
CVE-2006-1963
Directory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote authenticated users to include and execute arbitrary PHP code via a ".." dot dot in a language cookie, as demonstrated by uploading then accessing a smiliefile image that actually contains PHP code...
CVE-2006-1962
CVE-2006-1962 affects PCPIN Chat 5.0.4 and earlier. The vulnerability is an SQL injection in the login path: user input in the username field (login parameter to main.php) can be manipulated to execute arbitrary SQL commands on the backend. This is exploitable remotely and can impact confidential...
CVE-2006-1962
SQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username field login parameter to main.php...
PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PCPIN Chat = 5.0.4 "login/language" remote cmmnds xctn\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "- works with magicquotesgpc = Off\r\n"; echo "dork:...
PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== PCPIN Chat works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR...
PCPIN Chat 5.0.4 - loginlanguage Remote Code Execution
PCPIN Chat 5.0.4 - loginlanguage Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR login = "" or isnull1/0/ AND password = "somehash" AND activated = "1" LIMIT 1 ii arbitrary local inclusion:...
PCPIN Chat 5.0.4 - 'login/language' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR login = "" or isnull1/0/ AND password = "somehash" AND activated = "1" LIMIT 1 ii arbitrary local inclusion: now you can upload smilies with php code inside, we...
devhelp, mozilla security update
CentOS Errata and Security Advisory CESA-2006:0329 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the...
Critical: Red Hat Security Advisory: mozilla security update
Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issues that were fixed by thes...
ADODB < 4.70 (PHPOpenChat 3.0.x) - 'Server.php' SQL Injection
!/usr/bin/php -q -d shortopentag=on ? echo "PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: Welcome to your PHPOpenChat-Installation!\r\n\r\n"; if $argc4 echo "Usage: php...
