harlanddrinks-sql.txt

=========================================== Drinks script. -------------------------------------------------------------------------------------- Vendor: http://www.fivedollarscripts.com Demo: http://www.fivedollarscripts.com/drinks/index.php Notified: No. Probably don't care. Price: Five bones...

phpx-sql.txt

action = $GET'action'; 12. $this-newsid = $GET'newsid'; 13. 14. global $userinfo; 15. global $core; 16. 17. $this-core = $core; 18. 19. $this-userinfo = $userinfo; 20. 21. 22. 23. 24. if !$this-userinfo DIE"HACK ATTEMPT"; 25. if $this-userinfonews != 1 DIE"NO ACCESS TO THIS MODULE"; 26. 27...

Joomla Component ProDesk 1.0/1.2 Local File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.0 AND 1.2 comprodesk&includefile Local File Inclusion Vulnerability...

Pre Classified Listings - Insecure Cookie Handling

Pre Classified Listings - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

accphpemail-insecure.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap :Acc PHP eMail v1.1 Insecure Cookie Handling Script : http://www.accscripts.com/mailinglist/ Greetz :...

deV!Lz Clanportal [DZCP] <= 1.4.9.6 Blind SQL Injection Exploit

No description provided by source. use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password...

Acc Autos 4.0 - Insecure Cookie Handling

Acc Autos 4.0 - Insecure Cookie Handling -==========================================- Autore: x0r - Road Crew - Evolution Team Cms: Acc Autos v4.0 Bug: Insecure Cookie Handling Site: http://pro7.altervista.org/v2/ -==========================================- Exploit:...

absolutepoll-cookie.txt

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absolute Poll Manager XE v 4.1 see script http://www.xigla.com/absolutepm/demo.htm...

Article Publisher PRO - userid SQL Injection

Article Publisher PRO - userid SQL Injection Kira has decide be back after halloween Discovered by : Mountassif Moad Type Gap : Blind Sql Injection Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah , All my freind P0c :...

WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload

!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print ; print "\nEnter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url...

MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

NEPT Image Uploader 1.0 - Arbitrary File Upload

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

UC Gateway Investment SiteEngine 5.0 - 'announcements.php' SQL Injection

source: https://www.securityfocus.com/bid/31889/info SiteEngine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

e107 0.7.13 - usersettings.php Blind SQL Injection

e107 0.7.13 - usersettings.php Blind SQL Injection Author: GiReX Homepage: http://girex.altervista.org Date: 19/10/2008 CMS: e107 URL: http://e107.org/ Note: Works regardless of php.ini settings magicquotes, registerglobals.. Attenction: This exploit was written for educational purpose. Use it at...

flashchat-bypass.txt

File: connection.php if ChatServer::userInRole$this-userid, ROLEADMIN || ChatServer::userInRole$this-userid, ROLEMODERATOR || $req's' == 7 -- bypass line This piece of code allows a normal user to bypass role filtering and to be granted admin role as a normal user. To exploit the vulnerability...

ped-disclose.txt

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php...

ParsBlogger (links.asp id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= ParsBlogger links.asp id Remote SQL Injection Vulnerability ============================================================= || | | ParsBlogger links.asp id Remote SQL Injection...

LokiCMS 0.3.4 - 'writeconfig()' Remote Command Execution

Author: GiReX Homepage: http://girex.altervista.org CMS: LokiCMS 0.3.4 URL: http://www.lokicms.com/ Description: LokiCMS is still vulnerable to Remote Command Execution see: http://milw0rm.com/exploits/5408 The exploit changed becouse the vars changed but the bugged function is the same:...

mspicturepusher-activex.txt

'PicturePusherControl.PostURL = "http://127.0.0.1/?aaaa=1" PicturePusherControl.PostURL = "http://192.168.1.1/?aaaa=1" PicturePusherCont...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== Stash 1.0.3 SQL User Credentials Disclosure Exploit ===================================================== !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl This...