Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure

?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...

Credentials disclosure on shared hosts via session data

PMASA-2008-2 Announcement-ID: PMASA-2008-2 Date: 2008-03-29 Summary Credentials disclosure on shared hosts via session data Description We received an advisory from Jim Hermann, and we wish to thank him for his work. phpMyAdmin saves sensitive information like the MySQL username and password and...

CVE-2008-0996

The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print queue, which might allow local users to obtain the credentials...

Docebo <= 3.5.0.3 (lib.regset.php/non-blind) SQL Injection Exploit

No description provided by source. ?php printr' ----------------------------------------------------------------------------- Docebo Suite = 3.5.0.3 lib.regset.php/non-blind SQL injection exploit by rgod bug found by EgiX working with Mysql = 4.1 PHP 5.X needed by Docebo regardless of php.ini...

Docebo 3.5.0.3 - lib.regset.phpnon-blind SQL Injection

Docebo 3.5.0.3 - lib.regset.phpnon-blind SQL Injection = 4.1 PHP 5.X needed by Docebo regardless of php.ini settings no benchmark quickly coded to perform credentials disclosure ----------------------------------------------------------------------------- '; if $argc 126 $result.=" ."; else...

Docebo 3.5.0.3 - '/lib.regset.php/non-blind' SQL Injection

= 4.1 PHP 5.X needed by Docebo regardless of php.ini settings no benchmark quickly coded to perform credentials disclosure ----------------------------------------------------------------------------- '; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa....

flatphp-multi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Flat PHP...

Flat PHP Board <= 1.2 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================== Flat PHP Board | |||| /| / / --------------------------------------------------------------- Flat PHP Board = 1.2 Multiple Vulnerabilities...

CVE-2006-6104

CVE-2006-6104 affects the Mono platform’s XSP/ASP.NET server. The System.Web class does not properly verify local pathnames, allowing remote attackers to read sensitive content: source code by appending a space to a URI, and Web.Config via a Web.Config%20 request. The vulnerability lies in Mono 1...

ATutor多个SQL注入漏洞

ATutor是一款基于PHP的WEB应用程序。 ATutor不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'index.php'脚本中，由于对用户提交的URI参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 ATutor ATutor 1.5.3 ATutor ATutor 1.5.3 ATutor ATutor 1.5.1 pl2 ATutor ATutor 1.5.1 pl1 ATutor ATutor 1.5.1 ATutor ATutor 1.4.3 ATutor ATutor 1.4.2...

ContentNow 1.39 (pageid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ContentNow 1.39 pageid Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w use IO::Socket; use strict; ContentNow "pageid" Sql Injection...

CMtextS 1.0 - users_loginsadmin.txt Credentials Disclosure

CMtextS 1.0 - usersloginsadmin.txt Credentials Disclosure ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +...

CMtextS <= 1.0 (users_logins/admin.txt) Credentials Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== CMtextS = 1.0 userslogins/admin.txt Credentials Disclosure Vuln =================================================================== ::::::::: :::::::::: ::: ::: ::::::::::...

Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)

!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...

LoudBlog &lt;= 0.5 (id) SQL Injection / Admin Credentials Disclosure

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "LoudBlog = 0.5 'id' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "a dork: "Powered by LoudBlog"\r\n\r\n"; / works...

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n...

LoudBlog <= 0.5 (id) SQL Injection / Admin Credentials Disclosure

Exploit for unknown platform in category web applications ================================================================= LoudBlog 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...

LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

PAPOO 3_RC3 - SQL Injection / Admin Credentials Disclosure

!/usr/bin/php -q -d shortopentag=on ? echo "PAPOO = 3RC3 SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Help Contact Imprint Sitemap" | "powered by papoo" | "powered by cms papoo"\n\n"; / notes:...

Jaws-0.6.2.txt

!/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by the jaws project" |...