934 matches found
VideoScript 3.0 < 4.1.5.55 - 'Unofficial' Shell Injection
?php ============================================= = x VideoScript 3.0 = 4.1.5.55 Unofficial Shell Injection Exploit = = x by G4N0K = ============================================= errorreportingEALL; $G4N0K...
VideoScript 3.0 < 4.0.1.50 - 'Official' Shell Injection
?php =========================================== = x VideoScript 3.0 = 4.0.1.50 Official Shell Injection Exploit = = x by G4N0K = =========================================== errorreportingEALL; $G4N0K...
Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PHP Multibyte Shell Command Escaping Bypass Vulnerability Release Date: 2008/05/06 Last Modified: 2008/05/06 Author: Stefan Esser stefan.esseratsektioneins.de Application: PHP 5 =...
Uncover 88red system-vulnerability warning-the black bar safety net
Author: Xiao Shuaixsser@0. S. T This article has been published in the hacker Handbook No. 4, reproduced please indicate the source, or in a hyperlink way to specify: http://blog.0kee.com/xiaoshuai small handsome's blog A long time didn't go to the asp300 for a walk, not to feel sorry for this...
Docebo 3.5.0.3 - lib.regset.php Command Execution
Docebo 3.5.0.3 - lib.regset.php Command Execution getListTable." WHERE browsercode LIKE '%".$browserlanguage."%'"; executeQuery$qtxt; 801. 802. if $q && mysqlnumrows$q 0 803. $row=mysqlfetcharray$q; 804. $res=$row"regionid"; 805. an attacker cuold be inject SQL code through http accept-language...
WordPress <= 2.0.2 (cache) Remote Shell Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "--------------------------------------------------------------------\r\n"; echo "| WordPress = 2.0.2 'cache' shell injection exploit |\r\n"; echo "| by rgod [email protected] |\r\n"; echo "| site:...
DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== DevMass Shopping Cart = 1.0 Remote File Include Vulnerability ==============================================================...
PT-2007-4494 · Php · Phpmailer
Name of the Vulnerable Software and Affected Versions: PHPMailer versions 1.7 through 1.7.3 PHPMailer versions prior to 1.7.4 Description: The issue allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. This is a...
tcexam-inject.txt
resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // read data from cache requireonce$this-cachefile; $this-resource = $tmx; else if !empty$this-cachefile // open cache file...
TCExam <= 4.0.011 (SessionUserLang) Shell Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------- TCExam = 4.0.011 $COOKIE"SessionUserLang" shell injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...
TCExam <= 4.0.011 (SessionUserLang) Shell Injection Exploit
Exploit for unknown platform in category web applications =========================================================== TCExam resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // re...
TCExam 4.0.011 - SessionUserLang Shell Injection
TCExam 4.0.011 - SessionUserLang Shell Injection resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // read data from cache requireonce$this-cachefile; $this-resource = $tmx; else i...
TCExam 4.0.011 - 'SessionUserLang' Shell Injection
resource = array; // set selecteed language $this-language = strtoupper$language; // set filename for cache $this-cachefile = $cachefile; if fileexists$this-cachefile // read data from cache requireonce$this-cachefile; $this-resource = $tmx; else if !empty$this-cachefile // open cache file...
PHP-Update <= 2.7 extract() Auth Bypass / Shell Inject Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- PHPUpdate = 2.7 extract auth bypass / shell inject by rgod dork: "Powered by PHP-Update" -site:www.php-update.co.uk mail: retrog at alice dot it site:...
PHP-Update 2.7 - extract() Authentication Bypass Shell Injection
PHP-Update 2.7 - extract Authentication Bypass Shell Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont+...
PHP-Update 2.7 - 'extract()' Authentication Bypass / Shell Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
Vbulletin-2.x.txt
Hello,, Vbulletin 2.X sql injection Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] This is sql injection in vbulletin systems the injection is in the global.php file we can use it global.php?templatesused=/ the query will be...
Vbulletin 2.X sql injection
Hello,, Vbulletin 2.X sql injection Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] This is sql injection in vbulletin systems the injection is in the global.php file we can use it global.php?templatesused=/ the query will be...
WordPress <= 2.0.2 - Shell Injection
Because of this vulnerability in vars.php, the attackers can spoof their IP address via a PCREMOTEADDR HTTP header and include a remote file. Solution Update the WordPress to the latest available version at least 2.0.3...
WordPress-2.0.2.txt
!/usr/bin/php -q -d shortopentag=on ? echo "--------------------------------------------------------------------\r\n"; echo "| WordPress = 2.0.2 'cache' shell injection exploit |\r\n"; echo "| by rgod [email protected] |\r\n"; echo "| site: http://retrogod.altervista.org |\r\n"; echo "| dork:...