FlatPress 1.0.3 Cross Site Request Forgery / Shell Upload

FlatPress 1.0.3 CSRF Arbitrary File Upload RCE PoC function exec var command = document.getElementById"exec"; var url = "http://localhost/flatpress/fp-content/attachs/test.php?cmd="; var cmdexec = command.v...

XYCMS健身会所建站系统 v1.1 jsxm_detail.asp 参数id SQL注入漏洞

0x01漏洞简介 XYCMS健身会所建站系统采用asp+access架构。其v1.1版本在/jsxmdetail.asp处对参数id 过滤不严，导致出现SQL注入漏洞。 0x02漏洞详情 该系统默认存在一个管理员数据表adminuser，该表包含管理员名称字段admin和密码 md5加密字段password，远程攻击者可以结合union方式获取敏感信息，登陆后台，上传shell。 0x03修复方案 过滤。...

Mobilya Scripti 2 Shell Upload

Exploit Title: Mobilya Scripti v2 File Upload 2. Google Dork: intext:Lütfen sadece .doc yada .pdf uzantılı dosya gönderin. 3. Date: 10.4.2016 4. Exploit Author: [email protected] 5. Vendor Homepage: http://www.hazirscriptler.web.tr/mobilya-scripti-php-v2 6. Version: v2 7. Tested...

EduWind在线教育建站系统 MeController.php 逻辑漏洞可导致上传shell

No description provided by source...

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities

Administrator optionsModify Current Theme" or use site.com/members/console.php?cID=61. You can then insert the PHP code of your choosing into Footer. In order to add or edit code you are required to provide a special Admin Key that was defined during install. The key isn't needed as the check is...

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities Administrator optionsModify Current Theme" or use site.com/members/console.php?cID=61. You can then insert the PHP code of your choosing into Footer. In order to add or edit code you are required to provide a special Admin Key that was...

Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities

Exploit for php platform in category web applications Administrator optionsModify Current Theme" or use site.com/members/console.php?cID=61. You can then insert the PHP code of your choosing into Footer. In order to add or edit code you are required to provide a special Admin Key that was defined...

JMX2 Email Tester - 'save_email.php' Arbitrary File Upload

Exploit Title: JMX2 Email Tester - Web Shell Uploadsaveemail.php Date: 2016-02-15 Blog: http://www.hahwul.com Vendor Homepage: https://github.com/johnfmorton/jmx2-Email-Tester Software Link: https://github.com/johnfmorton/jmx2-Email-Tester/archive/master.zip Tested on: debian wheezy CVE : none...

JMX2 Email Tester Remote Shell Upload

Exploit Title: JMX2 Email Tester - Web Shell Uploadsaveemail.php Date: 2016-02-15 Blog: http://www.hahwul.com Vendor Homepage: https://github.com/johnfmorton/jmx2-Email-Tester Software Link: https://github.com/johnfmorton/jmx2-Email-Tester/archive/master.zip Tested on: debian wheezy CVE : none...

Tequila File Hosting 1.5 Shell Upload

================================================================================ Tequila File Hosting Unrestricted File Upload ================================================================================ Vendor Homepage: http://codecanyon.net/item/tequila-file-hosting-script/7604312 Date:...

Wordpress weever-apps-20-mobile-web-apps Shell Upload Exploit

Exploit for php platform in category web applications Exploit Title: Wordpress weever-apps-20-mobile-web-apps Shell Upload Exploit Software Link: http://weeverapps.com/product/cms/ Version:all Version Google dork1: inurl:/wp-content/plugins/weever-apps-20-mobile-web-apps The code in...

4images 1.7.11 Code Execution

!/usr/local/bin/python Exploit for 4images 1.7.11 Code Execution vulnerability An admin account is required to use this exploit Curesec GmbH import sys import re import argparse import requests requires requests lib parser = argparse.ArgumentParser parser.addargument"url", help="base url to...

SimpleBB 4.2 Shell Upload

SimpleBB 4.2 + All ver upload Vulnerability ========================================== Author : indoushka Vondor : http://themeforest.net/item/simple-bulletin-board/58838?ref=themac Dork : SBB V4.2 ========================= 1 register in forum 2 Creat a new topic 3 Attachment a php file to downol...

ffmpeg Video Converter 2.0 Pro Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : souk naamane 0 1 + Support e-mail :...

WordPress Advanced Uploader 2.10 Shell Upload

----------------------------------------- 0-DAY Aint DIE | No Priv8 | KedAns-Dz ----------------------------------------- ---------------------------- K |................| . h |.......................| A a |.......................| N l |.....................| S E |.......................| e D...

Neos CMS 2.0.3 Cross Site Scripting / Shell Upload Vulnerabilities

Neos CMS version 2.0.3 suffers from cross site scripting and remote shell upload vulnerabilities. Exploit Title: Neos/Flow multiple vulnerabilities Date: 24/11/2015 Author: Mickael Dorigny @ Synetis Vendor or Software Link: https://www.neos.io/ Version: = 2.0.3 Category: Multiple Vulnerabilities...

SMF 2.1 Beta 2 Remote Code Execution 0day Exploit

SMF 2.1 Beta 2 0day Exploit allow a remote attacker with the ability to create a basic user account to execute arbitrary code with the privileges of the application. You use python exploit and can authomatic shell upload and remote code execution Usage Info example Remote code execution: exploit....

XCart 5.2.6 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: XCart 5.2.6 Fixed in: 5.2.7 Fixed Version Link: https://www.x-cart.com/xc5kit Vendor Contact: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 08/13/2015 Disclosed to publi...

TomatoCart 1.1.8.6.1 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: TomatoCart v1.1.8.6.1 Fixed in: not fixed Fixed Version Link: n/a Vendor Contact: [email protected] Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 09/29/2015 Disclosed to public:...

dotclear 2.8.1 Shell Upload

Security Advisory - Curesec Research Team 1. Introduction Affected Product: dotclear 2.8.1 Fixed in: 2.8.2 Fixed Version Link: http://download.dotclear.org/latest.zip Vendor Website: http://dotclear.org/ Vulnerability Type: Code Execution Remote Exploitable: Yes Reported to vendor: 10/02/2015...