Joomla! Plugin NoNumber Framework - Multiple Vulnerabilities

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl Th...

Joomla JCE 2.0.10 Shell Upload

After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is going to submit related POC for this issue in Perl and PHP after one month for educational purposes. PHP Version: 7.5 Coded By: Mostafa Azizi errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2...

Easy Hosting Control Panel Authentication Bypass

Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested on: Ubuntu, Debian + Description Easy Hosting Control...

Easy Hosting Control Panel - Admin Authentication Bypass

Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested on: Ubuntu, Debian + Description Easy Hosting Control...

Easy Hosting Control Panel - Admin Authentication Bypass

Easy Hosting Control Panel - Admin Authentication Bypass Exploit Title: Easy Hosting Control Panel Admin Auth Bypass Google Dork: inurl:/ehcp/?op=applyfordomainaccount Date: 10/04/2011 Author: Jasman Software Link: https://launchpad.net/ehcp & http://www.ehcp.net Version: 0.29.10 - 0.29.13 Tested...

Andy's PHP Knowledgebase 0.95.5 Shell Upload

Exploit Title: aphpkb 0.95.5 Remote File Upload Date: 2011 Sep 21 Author: Black.Spook H4ckcity Security Team Software Link: http://prdownloads.sourceforge.net/aphpkb/aphpkb-0.95.5.tgz?download Version: 0.95.5 Tested on: Linux Email: [email protected] Steps to exploit this vulnerability: 1-...

Multiple WordPress Plugins - timthumb.php File Upload

Multiple WordPress Plugins - timthumb.php File Upload Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the...

WordPress Plugin timthumb.php Shell Upload

Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the timthumb.php library. By hosting a malicious GIF file...

Multiple Wordpress Plugin timthumb.php Vulnerabilites

Exploit for php platform in category web applications Exploit Title: Multiple Wordpress timthumb.php reuse vulnerabilities Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing --- Description --- The following Wordpress plugins reuse a vulnerable version of the...

webadmin <= Shell upload defect and repair-vulnerability warning-the black bar safety net

Title: webadmin " , 'Privileged' = false, 'Payload' = 'DisableNops' = true, , 'Platform' = 'php', 'Arch' = ARCHPHP, 'Targets' = 'Automatic', , 'DefaultTarget' = 0, 'DisclosureDate' = 'Sept 1 3, 2 0 1 1' registeroptions OptString. new'URI', true, "Path to webadmin ", "/", , self.class end def...

WordPress Plugins (editormonkey-FCKe) Multiple File Upload

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Dotclear 2.3.1 Shell Upload

Exploit Title: dotclear-2.3.1 Swf File Upload Vulnerability Date: 01/09/2011 Author: T0xic Author Mail: Malik99atHotmaildotfr Software: dotclear-2.3.1 Software Link: http://dotclear.org/download/ Go0gle Dork : 'inurl:"inc/swf/swfupload.swf" Comment ================ Exploited By T0xic Wahson...

KaiBB 2.0.1 SQL Injection / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

KaiBB 2.0.1 <= Multiple (SQL Injection / FU) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress Image Gallery With Slideshow 1.5 SQL Injection / Shell Upload

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

w2box web 2.0 File Repository <= 2.5.1 Shell upload

Exploit for php platform in category web applications Exploit Title: w2box: web 2.0 File Repository = 2.5.1 Shell upload Date: 28/08/2011 Author: N3t.Crack3r Vendor or Software Link: http://clement.beffa.org/labs/projects/w2box/ Version: = 2.5.1 Category:: webapps Google dork: Powered by w2box,...

Zazavi <=1.2.1 Multiple (XSRF + Shell Upload) Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Zazavi 1.2.1 Cross Site Request Forgery / Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

DEDECMS get SHELL EXP-vulnerability warning-the black bar safety net

Network transmission is said to know the background to use, but don't, as long as the plus the directory exists, the server can even outside, you can get the shell www.t00ls.net5 G$ w& h" m! n9 S: G Before the title conditions, you must ready yourself for the dede database, and then insert the...