XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...

XOOPS Module myAlbum-P &lt;= 2.0 (cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module myAlbum-P = 2.0 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : myAlbum-P 2.0 original Example S. : http://www.google.com.tr/search?q=+myAlbum-P+2.0+++original&hl=tr&start=0&sa=N...

XOOPS Module myAlbum-P 2.0 - 'cid' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

MyAlbum Language.Inc.PHP远程文件包含漏洞

MyAlbum是一款基于php的WEB应用程序。 MyAlbum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Language.Inc.php'脚本对用户提交的'langsdir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 攻击所需条件 攻击者必须访问MyAlbum。 MyAlbum MyAlbum 3.02 http://www.comscripts.com/scripts/php.myalbum.1731.html...

myalbum302.txt

!/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hackin...

CVE-2006-5865

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langsdir parameter...

CVE-2006-5865

CVE-2006-5865 is a PHP remote file inclusion in MyAlbum 3.02 and earlier, caused by language.inc.php handling of the langs_dir parameter, allowing remote arbitrary PHP code execution via a crafted URL. Affected: MyAlbum 3.02 and earlier. CVSS v2 base score 7.5 (Network, Low Attack Complexity, No ...

CVE-2006-5865

PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langsdir parameter...

MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== MyAlbum = 3.02 language.inc.php Remote File Inclusion Vulnerability ======================================================================...

MyAlbum 3.02 - language.inc.php Remote File Inclusion

MyAlbum 3.02 - language.inc.php Remote File Inclusion ============================================================================================== MyAlbum WWW.STARHACK.ORG ======= ===============...

MyAlbum &lt;= 3.02 (language.inc.php) Remote File Inclusion Vulnerability

No description provided by source. ============================================================================================== MyAlbum = 3.02 langsdir Remote File Inclusion Vulnerability =============================================================================================== Critical...