MunkyScripts Simple Gallery - SQL Injection

coded by ahmadbady //=========================================================================== // Topic : MunkyScripts Simple Gallery // Bug type : SQL Injection Vulnerability // Advisory : //=========================================================================== // Author : ItSecTeam //...

Mi-Dia Blog 1.0.6 XSS Vulnerability

Exploit for php platform in category web applications =================================== Mi-Dia Blog 1.0.6 XSS Vulnerability =================================== Title: Mi-Dia Blog 1.0.6 XSS Vendor: http://www.mi-dia.co.uk Dork: "Powered by Mi-Dia Blog v1.0.6" AUTHOR: ITSecTeam Email:...

Easy Icon Maker - .ico File Reading Crash

Easy Icon Maker - .ico File Reading Crash ! /usr/bin/python Easy Icon Maker .ico File Reading Crash Homepage: www.icon-maker.com Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATE - [email protected] - B3hz4d - Cdef3nder EAX 30303030 ECX...

All to All Audio Convertor 2.0 - Files Stack Overflow (PoC)

All to All Audio Convertor 2.0 - Files Stack Overflow PoC ! /usr/bin/python All to All Audio Convertor files stack overflow poc Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Forum: WwW.forum.itsecteam.com Special Tanks : PLATEN - [email protected] - B3hz4d - Cdef3nder EAX 10624DD3 ECX...

React software - Local File Inclusion

React software - Local File Inclusion React software local file inclusion - date: 29.03.2010 - author: SNK - language: php - page: http://react.nl - vuln: http://page/forum/listmessage/index.php?action=../../../../../../../../../../../../../etc/passwd%00 - dork: Powered by React - www.react.nl...

PJblog V3. 0 0day-vulnerability warning-the black bar safety net

Excerpt from: rain stroke bell 漏洞 具体 细节 请看 /Article/200904/37533.html my computer is not installed on php, just write a Vbs version of the exploit Tool, the specific code as follows: If WScript. Arguments. Count 2 Then WScript. Echo "Usage: Cscript.exe Exp. vbs to detect the forum URL you want to...

Simple Machines Forum 1.1.8 PHP File Execution

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20...

68kb Remote File Inclusion

=========================================================================== Topic : 68kb Bug type : multi remote file include Download : http://68kb.googlecode.com/files/68kb-v1.0.0rc2.zip Advisory : =========================================================================== Author : ItSecTeam...

68kb multi remote file include

Exploit for php platform in category web applications ============================== 68kb multi remote file include ============================== =========================================================================== Topic : 68kb Bug type : multi remote file include Download :...

Simple Machines Forum <= 1.1.8 (avatar) Remote PHP File Execute PoC

Exploit for php platform in category web applications =================================================================== Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum...

Simple Machines Forum (SMF) 1.1.8 - 'avatar' Remote PHP File Execute

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20081202 Iceweasel/2.0.0.19...

Cross site scripting

Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...

VBulletin 4.0.2 XSS vulnerability-vulnerability warning-the black bar safety net

vBulletin is an open source PHP Forum program. When searchtype is set to 1 when vBulletin does not have the correct filtration to submit to the search. php page, the query parameters will be returned to the user, a remote attacker can submit malicious parameters a request to perform cross-site...

CVE-2010-1113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...

PHPWind 6.0 multiple cross-site scripting vulnerability-vulnerability warning-the black bar safety net

PHPWind is a domestic of the more popular PHP-based Web forum application. PHPWind 在 访客 注销 时 没有 正确 的 过滤 提交 给 hack.php and search.php and read.php and post.php and thread.php and profile.php and sort.php and message.php and userpay. php, etc. page of request parameters, a remote attacker can submi...

CVE-2010-1055: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configforuminstalled parameter to 1 forum/adminLogin.php and 2 forum/userLogin.php...

philboard v1.02 sql injection Vulnerability

Exploit for unknown platform in category web applications =========================================== philboard v1.02 Sql Injection Vulnerability =========================================== + + |email protected SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql...

Philweb 1.02 SQL Injection

|ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philweb v1.02 sql injection Vulnerability +===========================================================================|| Script : philweb v1.02 || ! Author : ViRuSHiMa || ! Site : WwW.hell-z0ne.org -...

CORE-2010-0311 - eFront-learning PHP file inclusion vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ eFront-learning PHP file inclusion vulnerability 1. Advisory Information Title: eFront-learning PHP file inclusion vulnerability Advisory Id: CORE-2010-0311 Advisory...

philboard 1.02 - SQL Injection

philboard 1.02 - SQL Injection + + |ViRuSHiMa@YouR SyS|\ + ||||\ + ||||""|", + ||||""|"||| + " @''@""""""|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site :...