Joomla File Uploader Shell Upload

Title : Joomla Component comfileuploader Upload File Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Upload File Vulnerability Tested on : Windows XP sp3 FR Note : BAC 2011...

SmarterMail 7.x Cross Site Scripting / Shell Upload / Traversal

To: Vuln.Lists Re: Coordinated Disclosure, SmarterMail 7.x Versions Private Note - Rewrite as you wish, vendor has acknowledged these bugs and more and issued a fix. ------------------------------ Author: Hoyt LLC Research | http://xss.cx | http://cloudscan.me Identified: October 28, 2010 Vendor:...

PHP-Nuke Shell Upload

PHP-Nuke Shell Upload Vulnerability By : h311 c0d3 Contact : [email protected] Home : Black-Hat.cc Dork : inurl:modules.php?name=Upload Exploit : 1- you should first install Tamper Data from here https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ 2- start tamper then, upload your shell as...

RuubikCMS < v1.0.3 Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploi...

Joomla Jsjobs Shell Upload

Found by : Cyb3r-1sT C0ntact : cyb3r-1st at hotmail.com ======================================================= +++++++++++++++++++ Script information+++++++++++++++++ ======================================================= Script :: Joomla Jsjobs component...

RuubikCMS Shell Upload

Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploit === http://server/patch...

PBlogEX 1.2 Shell Upload

PBlogEX v1.2 Multiply Vulnerabilities vendor: http://www.twelvedev.com/ By l3lacklord WwW.Mokhareb.NeT Demo: http://f-ochoa.com/ Tested On: Apache/2.2.9 - PHP/5.2.6 Date: 2011/03/4 Des: The Admin Password Change Not Authoritated for execute POC: http://Site.com/PBlogEX/admin/admin.password.php...

GetSimple CMS 2.03 Shell Upload

Exploit Title: GetSimple CMS =2.03 Remote Upload Shell 0day Google Dork: "powered by GetSimple Version 2.03" Date: 15/FEB/2011 Author: s3rg3770 and Chuzz irc.azzurra.org hackerjournal Site Author: http://reflective.noblogs.org OWL? / o\ /o /|:.V.:|\ \:::::// -----"" ""----- Software Link:...

Openedit 5.1294 Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

Openedit 5.1294 - Remote Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

WordPress Enable Media Replace SQL Injection / Shell Upload

PRODUCT NAME: Enable Media Replace WordPress Plugin PRODUCT URL 1: http://wordpress.org/extend/plugins/enable-media-replace/ PRODUCT URL 2: http://mansjonasson.se/wordpress-plugins/enable-media-replace/ PRODUCT AUTHOR: Mans Jonasson for .SE Stiftelsen for Internetinfrastruktur -- http://www.iis.s...

OemPro 3.6.4 SQL Injection / Shell Upload

Exploit title: Multiple vulnerabilities on OemPro Product: OemPro Version Affected: v3.6.4 and probably prior. Date: 03/02/2011 Author: Ignacio Garrido Vendor: http://octeth.com Tested on: Linux - Windows 2003 Mail: [email protected] Path disclosure: http://localhost/clibounce.php FCKEditor 2.3.2...

MultiPowUpload 2.1 Shell Upload

Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.element-it.com Download Software : http://www.element-it.com/Download/ElementIT.MultiPowUpload3.zip Version: 2.1 Tested on: LiNuX...

WordPress Media Manager Shell Upload

Exploit Title: Wordpress media Manager Plugins Shell Upload Vulnerability Date: 22/01/2011 Author: PenetraDz AuthorEmail:[email protected] Home:Algeria Tested on: Win Xp sp3 En Google Dork: inurl:"/plugins/ImageManager/manager.php" manager/media/editor/plugins/ImageManager/manager.php insert...

Maximus 2008 CMS Shell Upload

maximus-cms fckeditor Arbitrary File Upload Vulnerability /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \\ \ \ \ // // //...

Sahana Agasti 0.6.5 Local File Inclusion / Shell Upload

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ posdubatgmail.com dun / 2011-01-07 Sahana Agasti = 0.6.5 Multiple Vulnerabilities Script: "Agasti is the PHP based project of the Sahana Software...

Concrete CMS 5.4.1.1 XSS / Code Execution

!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...

Concrete CMS 5.4.1.1 - Cross-Site Scripting / Remote Code Execution

!/usr/bin/python Concrete CMS v5.4.1.1 xss/remote code execution exploit Download: http://www.concrete5.org/ Special Zeitgeist pre release - "Moving Forward" - 15th Jan 2011 "They must find it difficult, those who take authority as the truth instead of truth as the authority"...

Amoeba CMS v1.01 multiple remote vulnerabilities

Exploit for php platform in category web applications !/usr/bin/python """ Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL...

amoeba CMS 1.01 - Multiple Vulnerabilities

amoeba CMS 1.01 - Multiple Vulnerabilities !/usr/bin/python """ Amoeba CMS v1.01 multiple remote vulnerabilities: Vendor: http://www.amoebacms.com/ Found by: mrme Contact date: 20/12/2010 2:37pm EST SQL Injection: ============= There is quite a few instances of pre/post auth SQL Injection in the...