Tizag Countdown Creator .v.3 Insecure Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Tizag Countdown Creator .v.3 Insecure Upload Vulnerability ========================================================== remote file upload script: tizag-countdownVersion3 download...

Tizag Countdown Creator .v.3 Insecure Upload Vulnerability

No description provided by source. remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected]...

Tizag Countdown Creator 3 - Insecure Upload

remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

CVE-2008-4377

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...

Sql injection

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...

CVE-2008-4377

CVE-2008-4377 : SQL injection vulnerability in Creative Mind Creator CMS 5.0, specifically in index.asp, allows remote attackers to execute arbitrary SQL commands via the sideid parameter. Documented impact indicates potential partial confidentiality/integrity/availability impact. No remediation ...

CVE-2008-4377

SQL injection vulnerability in index.asp in Creative Mind Creator CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the sideid parameter...

Web Server Creator 0.1 - langfile Remote File Inclusion

Web Server Creator 0.1 - langfile Remote File Inclusion source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise t...

Web Server Creator 0.1 - 'langfile' Remote File Inclusion

source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 intro, and 3 question parameters, and 4 unspecified answer parameters, in a createnew action. NOTE: some of the...

CVE-2007-6136

Multiple cross-site scripting XSS vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the 1 title, 2 intro, and 3 question parameters, and 4 unspecified answer parameters, in a createnew action. NOTE: some of the...

CVE-2007-6136

CVE-2007-6136 involves multiple XSS vulnerabilities in index.php of M2Scripts MySpace Scripts Poll Creator. The flaws allow remote attackers to inject arbitrary web script or HTML via parameters (title, intro, question, and unspecified answer parameters) in the create_new action. The affected sof...

mps-insertion.txt

HSCMySpace Scripts - Poll Creator JavaScript Injection Vulnerability Our MySpace Poll Creator script is the ultimate addition to your MySpace resource site. The script enables your user to quickly and easily create a poll that they can post to profile or bulletin to all their friends. Everyone...

MySpace Scripts - Poll Creator JavaScript Injection Vulnerability

HSCMySpace Scripts - Poll Creator JavaScript Injection Vulnerability Our MySpace Poll Creator script is the ultimate addition to your MySpace resource site. The script enables your user to quickly and easily create a poll that they can post to profile or bulletin to all their friends. Everyone...

MySpace Scripts Poll Creator - index.php HTML Injection

MySpace Scripts Poll Creator - index.php HTML Injection source: https://www.securityfocus.com/bid/26544/info MySpace Scripts Poll Creator is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

static XSS / SQL-Injection in Omegasoft Insel

Input passed to fields in OmegaMw7's tables isn't properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site and/or inject SQL-Commands This applies to many many standard fields i...

Inout Search Engine - Remote Code Execution

Inout Search Engine - Remote Code Execution !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc this is not a protection for two reasons: i everyone can make a cookie with false credentials ii there isn't any exit or die function after...

vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities

No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...

Alstrasoft Template Seller Pro 3.25 - Remote Code Execution

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path CMD Host: target server ip/hostname Path: path of template CMD: A Shell Command Example: php ".$argv0." localhost /template/ cat /etc/passwd"; die;...