OpenBASE 0.6a - root_prefix Remote File Inclusion

OpenBASE 0.6a - rootprefix Remote File Inclusion DeltaSecurityTEAM WwW.DeltaSecurity.iR Portal Name = OpenBASE Alpha 0.6 Class = Remote File Inclusion Risk = High Remote File Execution Download = Http://openbase.sourceforge.net Discoverd By = DeltahackingTEAM User In Delta Team = Dav00dCracker...

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion

vBulletin vBGSiteMap 2.41 - root Remote File Inclusion ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] ,...

EfesTECH Haber 5.0 - id SQL Injection

EfesTECH Haber 5.0 - id SQL Injection Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== EfesTECH Haber 5.0 id Remote SQL Injection Vulnerability ========================================================== Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability...

EfesTECH Haber 5.0 - 'id' SQL Injection

Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

phpAtm 1.30 - downloadfile Remote File Disclosure

phpAtm 1.30 - downloadfile Remote File Disclosure download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

phpAtm 1.30 (downloadfile) Remote File Disclosure Vulnerability

No description provided by source. download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

Kayako eSupport v3.00.90 Cross Site Scripting (XSS)

Script: Kayako eSupport Version: 3.00.90 Explored By: RedCasper United Arab HaCkers Proof: Path/index.php?m="scriptalert1;/script...

Flaw in about.r OS and Progress version disclosure

about.r OS and Progress version disclosure. Because of poor security in webutil/about.r it is possible to view the OS and the Progress version of a remote webspeed server. First you have to find the messenger execution url. For example: http://yourmachine.com/scripts/cgiip.exe/WService=wsbroker1...

DmCMS Shell Upload exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / DmCMS Shell Uploading / This exploit should allow you to execute commands / By : HACKERS PAL / WwW.SoQoR.NeT / echo' // / DmCMS Shell Uploading / / by HACKERS PAL [email protected] / / site: http://www.soqor.net /'; if...

DmCMS Shell Uploading

Hello Title : DmCMS Shell Upload Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] File .. includes/uploadfile.php After Giving Some conditions will allow you to upload any file you want the exploit here is the proof .. exploit : !/usr/bin/php...

dmcms-upload.txt

Hello Title : DmCMS Shell Upload Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] File .. includes/uploadfile.php After Giving Some conditions will allow you to upload any file you want the exploit here is the proof .. exploit : !/usr/bin/php...

Joomla! 1.5.0 Beta - 'pcltar.php' Remote File Inclusion

Hi, Joomla! 1.5.0 is in Beta version and "should NOT to be used for live or production sites." Joomla 1.0.12 has a good security but it seems that Joomla 1.5.0 doesnt have a good security approach. Anyway, there is a remote file inclusion in Joomla 1.5.0 Beta : File /libraries/pcl/pcltar.php, Lin...

fullybb-rfi.txt

Hello,, FullyModdedphpBB2 Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] / Script info Mod Title: FullyModdedphpBB2 Description: A fully modded phpBB / Remote File Include:...

extreme-rfi.txt

Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 3.0 Pre Final And other Versions Should be infected / Script info Mod Title: Extreme PHPBB 3.0 Mod Version: 3.0 Pre Final Author: danb00 Demo:...

eclipse-rfi.txt

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested Successfully on 0.5.0 "Lite" and other version should be infected : / Script Informations MOD Title: EclipseBB M...

Extreme PHPBB2 Remote File Inclusion

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 3.0 Pre Final And other Versions Should be infected / Script info Mod Title: Extreme PHPBB 3.0 Mod Version: 3...

EclipseBB Remote File Inclusion

Hello,, EclipseBB Remote File Inclusion .. With exploit : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested Successfully on 0.5.0 "Lite" and other version should be infected : / Script Informations MOD Title: EclipseBB M...

MediaBeez Sql query Execution .. Wear isn't ?? :)

Hello,, Media Beez Sql query execution : Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Sql Execution Exploit .. ?php // / MediaBeez Sql Query Execution / / By : HACKERS PAL [email protected] / / Website : WwW.SoQoR.NeT / /...