CS Guestbook Admin Name & Md5 Security Vuln

By Cr@zyKing http://ayyildiz.org Ayyildiz Team nternationel Force Cs Guestbook admin name & admin hass md5 vuln. http://xxx.com/base/usr/0.php admin name & md5 http://xxx.com/mod.php - go to admin panel Md5 Cracking : gdataonline.com & milw0rm.com Greatz : Eno7 , TamTurk , Metlak , Blackwolf ,...

rwdownload-sql.txt

RW::Download v2.0.3 lite - Remote SQL Injection Vendor : http://www.rwscripts.com/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Dork : "Powered by RW::Download v2.0.3 lite"...

InterWorx-CP Multiple HTML Injections Vulnerabilitie

HSC InterWorx-CP Multiple HTMl Injection Vulnerabilities The InterWorx Hosting Control Panel InterWorx-CP is a dedicated server control panel. InterWorx suffers from multiple HTMl injection vulnerabilities. JavaScript and Cross site scripting are just few found vulns, more sophisticated attacks...

2532Gigs 1.2.1 - activateuser.php Local File Inclusion

2532Gigs 1.2.1 - activateuser.php Local File Inclusion -°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-°-° 2532|Gigs 1.2.1 activateuser.php Local File Inclusion Vulnerability Discovered by bd0rk || SOH-Crew www.soh-crew.it.tt The german Coding and IT-Security Ressource...

2532|Gigs 1.2.1 (activateuser.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 2532|Gigs 1.2.1 activateuser.php Local File Inclusion Vulnerability =====================================================================...

DeskPRO Admin Panel Multiple HTML Injections

HSC DeskPRO Admin Panel Multiple HTML Injections An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks....

Unfixed XSS vulnerability at www.allmusic.tv

Security researcher Sudani-Hacker, has submitted on 08/10/2007 a cross-site-scripting XSS vulnerability affecting www.allmusic.tv, which at the time of submission ranked 96853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2007. It is...

AL-Athkar.v2.0 Remote File Include

Discovred By : Hasadya Raed ---------------------------- Contact : [email protected] , [email protected] , [email protected] ---------------------------- Greetz : Fairoz ---------------------------- Script: AL-Athkar.v2.0 ---------------------------- Download:...

AuraCMS [Forum Module] - Remote SQL Injection

AuraCMS Forum Module - Remote SQL Injection Vendor : http://auracms.org/ Download : http://iwan.or.id/redirect/download/36.html -- Forum Module Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net Dork : inurl:"?pilih=forum" file; /forum/komentar.php bug at...

ALL vgallite Remote File Include

Discovred By : Hasadya Raed ---------------------------- Contact : [email protected] , [email protected] , [email protected] ---------------------------- Greetz : Jonathan , Muts ---------------------------- Script: ALL vgallite ---------------------------- Dork: "vgallite"...

PHP-Nuke (ALL versions) Multiple XSS and HTML injection

PHP-Nuke ALL versions Search Module multiple XSS and HTML injection ------------------------------------------------------------------- The well-known PHP-Nuke CMS is vulnerable to multiple XSS attacks and HTML injections through the Search Module. The request is made using POST, but the whole...

SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login_form) Remote File Inclusion

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + PhpHostBot loginform Remote File Inclusion + + Download link : http://www.idevspot.com/PhpHostBot.php + +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Bug Found By :S4M3K...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

No description provided by source. phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2: www.school-of-hack.net Contac...

phpBB Module SupaNav 1.0.0 - link_main.php Remote File Inclusion

phpBB Module SupaNav 1.0.0 - linkmain.php Remote File Inclusion phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusion Vulnerability Vendor: http://www.phpbbhacks.com/download/8003 Download: http://www.phpbbhacks.com/load.php?id=8003 Founder: bd0rk Website 1: www.soh-crew.it.tt Website 2:...

phpBB Module SupaNav 1.0.0 (link_main.php) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php RFI Vulnerability ============================================================ phpBB Module SupaNav 1.0.0 linkmain.php Remote File Inclusi...

hacker Start-vulnerability warning-the black bar safety net

Don't know the name of the article. As far as I know, a lot of people to learn hacking techniques from how to get into others system start, the Processor collects a variety of exploits, backdoors, Trojans, etc. However,my earliest learning was not these,but this time I want to talk about:hacking,...

AzDG Dating Gold v3.0.5 ===> Remote File Include Vulnerability

+0+N0Te:-I am N0t HaCkEr I aM ScRipTs ExplOit FiNder++ ---------------------------------------------------------------------- ScRipT NamE:-AzDG Dating Gold v3.0.5 --------------------------------------- Download...

saphpshowcat-sql.txt

Discovery by :- Sw33t h4cK3r powered by : saphp ---------------------------- Exploit : http://Example.com/story/showcat.php?forumid=SQL...

Girlserv ads <= 1.5 (details_news.php) SQL Injection Vulnerability

No description provided by source. Girlserv ads = 1.5 Remote SQL Injection Vulnerability Found By : Cold z3ro , [email protected] Homepages : http://hackteach.org , http://h4ps.com Script : http://www.girlserv-demo.com/girlserv-ads1.5.zip For Admin :...

csc-sqlxss.txt

--- Comersus Shop Cart 7.07 SQL Injection & XSS Comersus is an active server pages asp software for running shopping stores, integrated with the rest of your web site. Comersus ASP Cart is free and IT CAN BE used for commercial purposes. An attacker may leverage this issue to have arbitrary scrip...