symphony-exec.txt

db-fetchRow0, $sql; ... ... ifisset$COOKIESYMCOOKIE $args = unserialize$COOKIESYMCOOKIE; $result = $this-login$args'username', $args'password', true, false; ------------------/source code--------------------- password value from cookie is n...

fuzzylime301-execphpcomm.txt

Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...

fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (php)

No description provided by source. !/usr/bin/php ?php Fuzzylime 3.01 Remote Code Execution Credits: Inphex and real C:\ php fuzzylime.php http://www.target.com/fuzzylime/ targetcmd id uid=63676dswrealty gid=888vusers groups=33www-data $url = $argv1;...

EQDKP 1.3.2f (user_id) Authentication Bypass (PoC)

Exploit for unknown platform in category web applications ================================================== EQDKP 1.3.2f userid Authentication Bypass PoC ================================================== ?php // EQDKP 1.3.2f Authentication Bypass PoC $data'autologinid' = 'x'; $data'userid' = "1...

jportal-exec.txt

$host = $argv1; $path = $argv2; $phpcode = $argv3; $info = "\n\n". " jPORTAL 2.3.1 & UserPatch forum.php Remote PHP Code Execution Exploit\n". "\n". " author: irk4zatyahoo.pl\n". " http://irk4z.wordpress.com\n". "\n". "\n". " greetz: str0ke, wacky, polish under :\n"...

avts10-passwd.txt

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

InoutMailingListManager 3.1 - Remote Command Execution

InoutMailingListManager 3.1 - Remote Command Execution !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Site CMD Host: target server ip/hostname Path: path of phpMyNewsletter CMD: a shell command Example: php...

MOPB-array.txt

?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP Project // // C Copyright 2007 Stefan...

Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; if$argc 9 print" Connectix Boards = 0.7 pskin Multiple Vulnerabilities Exploit ------------------------------------------------------------------- PHP conditions: none Credits: DarkFig [email protected] URL:...

GuppY <= 4.5.16 Remote Commands Execution Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Guppy = 4.5.16 remote commands execution exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: "Site powered by GuppY" | "Site cr驠avec Gupp...

Cahier de texte 2.2 - Bypass General Access Protection

Cahier de texte 2.2 - Bypass General Access Protection 'Administrateur' header"Location: ../index.php"; ; else header"Location: ../index.php";? ... / if!isset$GET'host' || empty$GET'host' headers; if!isset$GET'wanted' $wanted = 'index.php'; $host = $GET'host'; $prox = $GET'prox'; $path =...

Newswriter SW 1.4.2 (main.inc.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== Newswriter SW 1.4.2 main.inc.php Remote File Include Exploit ============================================================== Newswriter SW v1.4.2 Remote File Include Exploit ::...

hotmailmsnxss.txt

Hotmail/MSN Cross Site Scripting Exploit Author: Simo64 Contact: simo64atmorxdotorg Discovered: 07/25/2006 Published: 08/10/2006 Vendor: MSN.com Service: Hotmail.com Webmail Service Vulnerability: Cross Site Scripting Cookie-Theft Severity: Medium/High Tested on: IE 6.0 designed for firefox 1.5 a...

ActualAnalyzer Pro <= 6.88 (rf) Remote File Include Exploit

Exploit for unknown platform in category web applications =========================================================== ActualAnalyzer Pro " ."turl:" ."hurl:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen...

Invision Community Blog .. Bugs

LEFT Invision Community Blog .. Bugs SQL Injection :- Filename :- mod.php Function name :- dommod The $ids Unfilter Input By Intval As Array : So We Can Do SQL Injection -- Arabic /LEFT RIGHT ЗбгКЫнС $ids ЫнС гЭбКС Ъд ШСнЮ ЗбПЗбе intval жеж ИФЯб гХЭжЭе .. беРЗ ЗбУИИ ггЯд Ъгб чНЮде /RIGHT LEFT php...

Zeroboard 4.1 preg_replace Remote nobody Shell Exploit

No description provided by source. / ---------------------------------------------------------------------------------- + Zeroboard pregreplace vulnerability Remote nobody shell exploit ---------------------------------------------------------------------------------- by n0gada [email protected]...

PHP-Post Exploit

PHOX: PHP-Post Exploit Content - Credits - BICWAE - Solution - Contact Credits Exploit discovered by Phoxpherus Phorce, Phox R&P, Terencentanio Root32 Thanks to SilentWolf for the name BICWAE ... lmao BICWAE - Bypassing Input Check With Alternate Entries It's possible to 'spoof' your user identit...

TikiWiki Unauthorized Page Access

The remote host is running TikiWiki, a content management system written in PHP. The remote version of this software is vulnerable to a flaw that could allow an attacker to bypass the permissions of individual Wiki pages. An attacker could exploit this flaw to deface the remote web server or gain...

Multiple osTicket exploits!

ATTENTION ALL SITES USING OSTICKET. PLEASE DISABLE UPLOADS. June 17 2004. Multiple Problems with osTicket Software Data: OSTICKET, http://www.osticket.com/ "Need to test the system before you install? Then try our demo version of the latest release of osTicket. DEMO DISABLED" Note: When a softwar...

CVE-2003-1307

The modphp module for the Apache HTTP Server allows local users with write access to PHP scripts to send signals to the server's process group and use the server's file descriptors, as demonstrated by sending a STOP signal, then intercepting incoming connections on the server's TCP port. NOTE: th...