366 matches found
PHPEcho CMS 2.0 (id) Remote SQL Injection Vulnerability
No description provided by source. PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script :...
Unfixed XSS vulnerability at www.ozap.com
Security researcher Mystick, has submitted on 01/11/2008 a cross-site-scripting XSS vulnerability affecting www.ozap.com, which at the time of submission ranked 11924 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...
adult-access.txt
Adult Script Unauthorized Administrative Access Exploit bodymargin:0px;font-style:normal;font-size:10px;color:FFFFFF;font-family:Verdana,Arial;background-color:3a3a3a;scrollbar-face-color: 303030;scrollbar-highlight-color: 5d5d5d;scrollbar-shadow-color: 121212;scrollbar-3dlight-color:...
Content Injector 1.53 (index.php) Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Content Injector V1.53 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...
The bully behind the vulnerable-the fully anatomical Thunder shopping system-vulnerability warning-the black bar safety net
Training back is very boring, seeing local Intel branch is one called Thunder shopping system of the entire Station program, Thunder shopping system is domestic a more extensive use of the shopping system, now that we look at it from the safety of what exactly how! Downloaded from the Internet 7....
[Full-disclosure] [Sec-1 Ltd] Advisory: MailMarshal Spam Quarantine Password Retrieval Vulnerability
SEC-1 LTD. www.sec-1.com Security Advisory Advisory Name: MailMarshal Spam Quarantine Password Retrieval Vulnerability Release Date: 17-06-2007 Application: MailMarshal SMTP 6.2.0.x Platform: Microsoft Windows Severity: Password Retrieval Author: Gary O'leary-Steele Reported: See time line sectio...
MailMarshal Spam Quarantine Interface Arbitrary Account Password Retrieval
The remote host is running the Spam Quarantine Management web component of MailMarshal SMTP, a mail server for Windows. The version of the Spam Quarantine Management web component installed on the remote host fails to sanitize input to the 'emailTextBox' parameter of the 'Register.aspx' script...
Realtor 747 - index.php?categoryId SQL Injection
Realtor 747 - index.php?categoryId SQL Injection --==+================================================================================+==-- --==+ Realtor 747 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...
phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection
phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...
CVE-2007-2332
Nortel VPN Router aka Contivity 1000, 2000, 4000, and 5000 before 605.140 uses a fixed DES key to encrypt passwords, which allows remote authenticated users to obtain a password via a brute force attack on a hash from the LDAP store...
Rigter Portal System (RPS) 6.2 - Blind SQL Injection
? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $host = "localhost"; $path="/rps"; $id=1; echo...
EQdkp 1.3.1 - 'Referer Spoof' Remote Database Backup
Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: "Powered by EQdkp" Author: Eight10 Contact: [email protected] -------------------------------------------------------------------------------------------------------- Background: EQdkp is the largest DKP...
coppermine-php.txt
!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...
Coppermine Photo Gallery 1.4.10 - 'xpl.php' SQL Injection
!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...
Hacking tricks of talking about network intrusion to improve the method-vulnerability warning-the black bar safety net
Now you want to invade a site directly with the data server, open some ports, with those overflowing way to engage in the web server Station, presumably unlikely, if now also can use 1 4 3 3 can easily handle a server, then you will be able to buy lottery tickets went to the Oh. Now the...
more.groupware 0.74 - new_calendarid SQL Injection
more.groupware 0.74 - newcalendarid SQL Injection ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo...
CosmicShoppingCart - 'search.php' SQL Injection
Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
No description provided by source. Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be...
Clansys 1.1 (showid) - SQL Injection
Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysql based clan content management...