Lucene search
+L

1024 matches found

zdt
zdt
added 2005/09/23 12:0 a.m.68 views

phpMyFAQ <= 1.5.1 (User-Agent) Remote Shell Injection Exploit

Exploit for unknown platform in category web applications ============================================================= phpMyFAQ = 1.5.1 User-Agent Remote Shell Injection Exploit ============================================================= ?php 17.34 22/09/2005 phpmyfaqxpl.php PhpMyFaq 1.5.1...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2005/09/17 12:0 a.m.10 views

CuteNews 1.4.0 - Shell Injection Remote Command Execution

CuteNews 1.4.0 - Shell Injection Remote Command Execution ?php cutenxpl.php CuteNews 1.4.0possibly prior versions remote code execution by rgod site: http://rgod.altervista.org usage: launch form Apache, fill in requested fields, then go! make these changes in php.ini if you have troubles with th...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2004/07/13 12:0 a.m.44 views

Microsoft Internet Explorer - Remote Wscript.Shell

----------------------------------------------------- default.htm ------------------------------------------------------- function InjectedDuringRedirection showModalDialog'md.htm',window,"dialogTop:-1000;dialogLeft:-1000;dialogHeight:1;dialogWidth:1;". location="vbscript:""";...

10CVSS5.8AI score0.61057EPSS
SaveExploits1
Exploit DB
Exploit DB
added 1999/12/26 12:0 a.m.35 views

Tony Greenwood WebWho+ 1.1 - Remote Command Execution

source: https://www.securityfocus.com/bid/892/info WebWho+ is a free cgi script written by Tony Greenwood for executing whois queries via the www. Though it does perform checks for shell escape characters on some parameters, it misses the 'type' variable and allows for malicious input to be sent ...

10CVSS5.8AI score0.11072EPSS
SaveExploits1
Rows per page
Query Builder