chCounter 3.1.3 - SQL Injection

!/usr/bin/python Exploit Title: chCounter = 3.1.3 SQLInjection Date: 2010/11/18 Author: Matias [email protected]. Software Link: http://chcounter.org/chCounter3/getfile.php?id=5 Version: 3.1.3 Tested on: Ubuntu Server 10.04 with apache Requirements: - Downloads must be...

Joomla! Component ProDesk 1.5 - Local File Inclusion

Joomla! Component ProDesk 1.5 - Local File Inclusion ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.5 comprodesk&includefile Local File Inclusion http://joomlashowroom.com Price - $ 49.99...

PT-2010-5323 · Deluxebb · Deluxebb

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic quotes gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-103...

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple XSS Vulnerabilities

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...

Wiccle Web Builder CMS / iWiccle CMS Community Builder Cross Site Scripting

Wiccle Web Builder CMS and iWiccle CMS Community Builder Multiple Cross-Site Scripting Vulnerability. SecPod Technologies www.secpod.com Author Veerendra G.G SecPod ID: 1005 09/07/2010 Issue Discovered 09/10/2010 Vendor Notified 09/13/2010 Vendor Confirmed 09/14/2010 Fix Available Class: Cross-Si...

printf(1) via PHP magic_quotes Utility Command Encoder

This encoder uses the printf1 utility to avoid restricted characters. Some shell variable substitution may also be used if needed symbols are blacklisted. Some characters are intentionally left unescaped since it is assumed that PHP with magicquotesgpc enabled will escape them during request...

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities

Exploit for php platform in category web applications ========================================================= OvBB v0.16a Multiple Local File Inclusion Vulnerabilities ========================================================= OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by...

OvBB 0.16a Local File Inclusion

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = " :: Calendar :. New$strType Event"; 4...

OvBB 0.16a - Multiple Local File Inclusions

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = " :: Calendar :. New$strType Event"; 4...

OvBB 0.16a - Multiple Local File Inclusions

OvBB 0.16a - Multiple Local File Inclusions OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle ...

WhiteBoard 0.1.30 Blind SQL Injection

WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities Name WhiteBoard Vendor http://sarosoftware.com Versions Affected 0.1.30 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-24 X. INDEX I. ABOUT THE...

PHP-Nuke 8.1.0.3.5b (Your_Account Module) - Blind SQL Injection (Benchmark Mode)

PHP-Nuke new; my $average = 0; print "+ Calculating average load time may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to modules.php\n...

Поиск уязвимостей в веб приложениях

В этой статье я собрал интересные на мой взгляд ошибки в php скриптах. Но для начала, описание некоторых параметров PHP-интерпретатора: Цитата: registerglobals = ON - все переменные регистрируются как глобальные; magicquotesgpc = ON - в массивах POST, GET, COOKIE экранируются кавычки и опасные...

iScripts CyberMatch 1.0 - Blind SQL Injection

iScripts CyberMatch 1.0 Blind SQL Injection Vulnerability Name iScripts CyberMatch Vendor http://www.iscripts.com Versions Affected 1.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-02-07 X. INDEX I. ABOUT THE...

DEDECMS website management system plus/carbuyaction. php local include vulnerability-vulnerability warning-the black bar safety net

DedeCms based on PHP+MySQL technology development, supporting Windows, Linux, Unix and other server platforms, from the 2 0 0 4 year began to publish the first version began, so far has released five large version. DedeCms in a simple, robust, flexible, open source several features occupied the...

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities

Joomla! Component Answers 2.3beta - Multiple Vulnerabilities Exploit Title: Joomla Component Answers v2.3beta Multiple Vulnerabilities Date: 25 May 2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/communication/forum/12652 Version: 2.3beta Tested on: PHP5, MySQL5 Blind SQL...

MediaWave (news) SQL Injection vulnerability

Exploit for php platform in category web applications ============================================ MediaWave news SQL Injection vulnerability ============================================ Exploit Title: MediaWavenews& more SQL injection Date: 14-6-2010 Author: CaSpErHaK Tested on: linux...

ArabPortal 2.2.x SQL Injection

Exploit Title: ArabPortal V2.2.x Remote SQL Injection Vulnerability Author: SwEET-DeViL Published: 10-6-2010 Software Link: http://www.arab-portal.info/download.php?action=download&fileid=127 Version: 2.2.x Tested on: Lunix Need : Magic Quotes Gpc = Off | |...

ArabPortal v2.2.x Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== ArabPortal v2.2.x Remote SQL Injection Vulnerability ==================================================== Software Link: http://www.arab-portal.info/download.php?action=download&fileid=127...

phpmps 2.0 GBK Help.php $keywords SQL注入漏洞

php分类信息发布系统是一款免费开源的分类信息程序,适用于建立本地信息站点 Help.php 文件，取得keywords的值，只用trim函数，去除了首位空，直接带入sql查询 //取得文章列表 $keyword = !empty$REQUEST'keywords' ? trim$REQUEST'keywords' : ''; $typeid = !empty$REQUEST'typeid' ? intval$REQUEST'typeid' : 0; if!empty$keyword $arr = array; $keywords = 'AND '; $keywords .= "titl...