6490 matches found
PHPUserBase 1.3b - 'unverified.inc.php' Remote File Inclusion
??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...
allclub-lfi.txt
Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...
OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ OpenSiteAdmin = 0.9.1.1 Multiple File Inclusion Vulnerabilities ================================================================ Software Vulnerable: OpenSiteAdmin 0.9.1 BETA...
All Club CMS <= 0.0.1f index.php Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== All Club CMS pepepistola, musashi, patoruzu, ElvisPresley and sky Yashira.org-- PescaoDeth, Garcez, Crackneo, alexhk23 and all users of yashira as dapaf, elmanguan, etc...
wpfootnotes-multi.txt
Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...
Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites
Wordpress Plugin wp-footnotes 2.2 adminpanel.php Multiple Vulnerabilities Founded: 1st, February 2008 Founder: NBBN 1 No Access Control. An attacker can access the adminpanel of the footnotes. http://site.tld/wordpress/wp-content/plugins/wp-footnotes/adminpanel.php The result - Many XSS...
tvp-overflow.txt
/0day Total Video Player V1.03 .m3u file Local Buffer Overflow In this exploit you chose to bind a port or to spawn calc.exe. After I crafted a playlist I observed that the stack got corrupted. The corruption accured in some points,and overwriten a seh handler. I managed to get control of the ECX...
seagull-063-xss.txt
fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: Seems that none of the theme css renderers sanatize...
DeluxeBB 1.1 XSS Vulnerabilitie
Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=scriptalert"XSS"/script...
deluxebb-xss.txt
Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=alert"XSS"...
FreeBSD : drupal -- XSS (register_globals) (f0fa19dd-c060-11dc-982e-001372fd0af2)
The Drupal Project reports : When theme .tpl.php files are accessible via the web and the PHP setting registerglobals is set to enabled, anonymous users are able to execute cross site scripting attacks via specially crafted links. Drupal's .htaccess attempts to set registerglobals to disabled and...
Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX shipnx AT yahoo com Impact: Remote file include Status: Patch not...
mas-rfi.txt
---------------------------------------------------------------------- Member Area System MAS Remote File Include Vulnerability viewfunc.php ---------------------------------------------------------------------- Author: ShipNX Impact: Remote file include Status: Patch not available...
CVE-2007-5761
The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...
CVE-2007-5761
The NantSys device 5.0.0.115 in Motorola netOctopus 5.1.2 build 1011 has weak permissions for the \.\NantSys device interface nantsys.sys, which allows local users to gain privileges or cause a denial of service system crash, as demonstrated by modifying the SYSENTEREIPMSR CPU Model Specific...
RunCMS Multiple Script lid Parameter SQL Injection
The version of this software installed on the remote host fails to sanitize user-supplied input to the 'lid' parameter of the 'modules/mydownloads/visit.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and 'registerglobals' settings, an attacker may be able to...
sinecms-lfiexec.txt
| | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: PoC: Usually, this is a correctly code, with no possible exploitation. But if registerglobals is ON, we...
Loudblog loudblog/inc/parse_old.php template Parameter Arbitrary Remote Code Execution
The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog on the remote host fails to sanitize input to the 'template' parameter of the 'loudblog/inc/parseold.php' script before using it in an 'eval' statement to evaluate PHP...
SineCMS 2.3.5 - Local File Inclusion Remote Code Execution
SineCMS 2.3.5 - Local File Inclusion Remote Code Execution | | | / | |\ \ / | / |/ | | | | |/ \ | | | |||| | | /| / / | | Sine CMS Local File Inclusion / RCE Registerglobals: ON | | Version: = 2.3.5 | | Vendor: www.sinecms.net | | Discovered by: KiNgOfThEwOrLd | Intro: Sine cms is affected by a...
Cross-Site Scripting vulnerabilities in AwesomeTemplateEngine
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в AwesomeTemplateEngine. XSS: http://site/templates/exampletemplate.php?datatitle=3C/title3E3Cscript3Ealertdocument.cookie3C/script3E...