473 matches found
C99.php Shell Authentication Bypass
Exploit Title: C99 Shell Authentication Bypass via Backdoor Google Dork: inurl:c99.php Date: June 23, 2014 Exploit Author: mandatory Matthew Bryant Vendor Homepage: http://ccteam.ru/ Software Link: https://www.google.com/ Version: ", " ", $donatedhtml; header"WWW-Authenticate: Basic...
C99Shell (Web Shell) - 'c99.php' Authentication Bypass
Exploit Title: C99 Shell Authentication Bypass via Backdoor Google Dork: inurl:c99.php Date: June 23, 2014 Exploit Author: mandatory Matthew Bryant Vendor Homepage: http://ccteam.ru/ Software Link: https://www.google.com/ Version: ", " ", $donatedhtml; header"WWW-Authenticate: Basic...
C99Shell (Web Shell) - c99.php Authentication Bypass
C99Shell Web Shell - c99.php Authentication Bypass Exploit Title: C99 Shell Authentication Bypass via Backdoor Google Dork: inurl:c99.php Date: June 23, 2014 Exploit Author: mandatory Matthew Bryant Vendor Homepage: http://ccteam.ru/ Software Link: https://www.google.com/ Version: ", " ",...
Atom CMS Shell Upload / SQL Injection / Bypass Vulnerabilities
Atom CMS suffers from remote shell upload and remote SQL injection vulnerabilities. Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradul...
Atom CMS Shell Upload / SQL Injection
Exploit Title : Atom CMS SQL Injection and file upload vulnerability Author : Jagriti Sahu Vendor : https://github.com/thedigicraft/Atom.CMS Date : 07/07/2014 Discovered at : IndiShell Lab Love to : Surbhi, Mradula and Harry //////////////////////// /// Overview: //////////////////////// Atom CMS...
EZ-Oscommerce 3.1 - Remote File Upload
No description provided by source. !/usr/bin/env python coding: utf-8 import string import random from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from pocsuite.lib.utils.webshell import PhpVerify, PhpShell from pocsuite.lib.utils.password...
eLitius 1.0 - Remote Command Execution Exploit
No description provided by source. ?php //786 / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Clipbucket 2.4 RC2 645 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery...
Valdersoft Shopping Cart <= 3.0 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl cijfer-vscxpl - Valdersoft Shopping Cart =3.0 Remote Command Execution Exploit Copyright c 2005 cijfer [email protected] All rights reserved. 1. example cijfer@kalma:/research$ ./cijfer-vscxpl.pl -h www.valdersoft.com -d /store...
New-CMS - Multiple Vulnerability
No description provided by source. Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto fulgur Fontanella Author URL: ictsec.wordpress.com...
WSN Links SQL Injection Vulnerability
No description provided by source. 'WSN Links' SQL Injection Vulnerability CVE-2010-4006 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the search.php code that allows for SQL injection of various parameters. By assemblin...
Andy's PHP Knowledgebase Project 0.95.4 - SQL Injection
No description provided by source. ------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/...
FlashBB <= 1.1.8 (phpbb_root_path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl TUFaT FlashBB = 1.1.5 phpbbrootpath Remote File Include Exploit Bugs found & code By h4ntu aka TeloGanyong base on http://www.securityfocus.com/bid/18456/ http://h4ntu.com c 2006 usage: perl flashBB.pl target cmd shell location cmd shell variable...
joomla component memorybook 1.2 - Multiple Vulnerabilities
No description provided by source. SQL Injection ------------- requires: magic quotes OFF, user account Add this as the description of a new event: ', 63,SELECT CONCATusername,0x20,email FROM users WHERE gid=25 LIMIT 1,1,1,1 -- ' NOTE: 63 MUST be your Joomla user ID. extracted info can be found o...
NoticeBoardPro 1.0 - Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery...
Graugon Forum 1.3 - SQL Injection Vulnerability
No description provided by source. !------------------------------------------------------------------------ Software................Graugon Forum 1.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.graugon.com/ Discovery...
ProQuiz 2.0.0b Arbitrary Upload Vulnerability
No description provided by source. Source: http://packetstormsecurity.org/files/view/98669/ProQuiz-Shell.py.txt ------------------------------------------------------------------------ Software................ProQuiz V2 Vulnerability...........Arbitrary Upload...
mySeatXT 0.1781 SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://sourceforge.net/projects/myseat/ Discovery...
Time and Expense Management System Multiple Vulnerabilities
No description provided by source. ------------------------------------------------------------------------ Software................Time and Expense Management System Vulnerability...........Command Injection Threat Level............Very Critical 5/5...
N-13 News 1.2 - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15643/info N-13 News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...