Bloginator v1a SQL Command Injection via Cookie Bypass Exploit

No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

Free Arcade Script 1.0 LFI Command Execution Exploit

Exploit for unknown platform in category web applications ==================================================== Free Arcade Script 1.0 LFI Command Execution Exploit ==================================================== !/usr/bin/perl...

Graugon Forum 1 - id Command Injection SQL Injection

Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

CmsFaethon 2.2.0 (info.php item) SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

PHP 5.2.6 (error_log) safe_mode Bypass Vulnerability

Exploit for multiple platform in category local exploits ==================================================== PHP 5.2.6 errorlog safemode Bypass Vulnerability ==================================================== SecurityReason.com PHP 5.2.6 errorlog safemode bypass Author: Maksymilian Arciemowicz...

jshop-lfi.txt

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...

JShop 1.x < 2.x - 'xPage' Local File Inclusion

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...

Cross site scripting

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

CVE-2007-6569

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

CVE-2007-6569: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the View Error Log functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566246...

PBLang 4.67.16.a - Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " PBLang = 4.67.16.a Remote Code Execution Exploit\r\n"; print...

phpnukesplat-lfi.txt

!/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork: "Splatt Forum" Discovered & Coded ...

galeria-lfi.txt

!/usr/bin/perl Script Name: Galeria Zdjec = v3.0 zdnumer.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : $$ : Free use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...

Apple Mac OS X Apple Type Services server fails to securely create error log files

Overview The Apple Mac OS X Apple Type Services server insecurely creates error log files, which may allow a local attacker to overwrite or create files with system privileges. Description Apple Mac OS X Apple Type Services server fails to securely create error log files. A local attacker may be...

PHPManta 1.0.2 - 'view-sourcecode.php' Local File Inclusion

!/usr/bin/perl Script Name: phpManta - Mdoc = 1.0.2 view-sourcecode.php Local File Include Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; use LWP::Simple; @apache= "../../../../../var/log/httpd/accesslog", "../../../../../var/log/httpd/errorlog", "../apache/logs/error.log",...

CVE-2006-4624

CRLF injection vulnerability in Utils.py in Mailman before 2.1.9rc1 allows remote attackers to spoof messages in the error log and possibly trick the administrator into visiting malicious URLs via CRLF sequences in the URI...

CVE-2006-3261

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

CVE-2006-3261: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Trend Micro Control Manager TMCM 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log...

Directory traversal

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the glsession cookie of users.php, which is stored in error.log...

Apache Error Log Escape Sequence Injection

The target is running an Apache web server which allows for the injection of arbitrary escape sequences into its error logs. An attacker might use this vulnerability in an attempt to exploit similar vulnerabilities in terminal emulators. OpenVAS has determined the vulnerability exists only by...