Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities

No description provided by source. Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gücleri Pst: [email protected] ============================= Dork: allinurl:clientsignup.php "classifieds" Dork2: Powered By: Living Local V1.1 Demo: http://www.jerseyads.net/listtest.php?r="scriptalert/script...

cpcommerce-bypass.txt

Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini settings Vendor informed: 23/11/08 cpCommerce 1.2.7 released: 30/11/08 Public advisor...

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini setting...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

maurycms-upload.txt

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ============================================== MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en...

MauryCMS 0.53.2 - Arbitrary File Upload

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

PHPStore Car Dealers Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================== PHPStore Car Dealers Remote File Upload Vulnerability ===================================================== PHP Store Auto Classifieds Remote File Upload Author: ZoRLu N0T: YALNIZLIK,...

zeeprop-uploadxss.txt

ZEEPROPERTY v1.0 remote file Upload & XSS author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com dork: "Designed & Developed by Zeeways.com" first register to site you add this code your shell to head GIF89a; example yourshell.php: GIF89a; and save yoursheell.php after login to site...

ZEEJOBSITE 2.0 Remote File Upload Vulnerability

No description provided by source. ZEEJOBSITE v2.0 remote file Upload author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com dork: "[email protected]" date: 08/11/2008 aha simdi gönderiyorum saat 10:40 : first register to site you add this code your shell to head GIF89a;...

apartment-rfuxss.txt

Apartment Search Script Multiple Remote Vuln. Remote File Upload & XSS ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : dork:...

zubrag-upload.txt

//Title - Zubrag Uploader 1.0 Arbitrary Shell Upload Vulnerability //Vendor - zubrag.com/scripts/file-upload-form.php //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. The script attempts to hide the...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

No description provided by source. //Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability ============================================================ //Title - NEPT Image Uploader shell upload //Vendor -...

minb Remote Code Execution Exploit

!/usr/bin/python minb Remote Code Execution Exploit AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Site : http://minb.sf.net Download :...

minb 0.1.0 - Remote Code Execution

!/usr/bin/python minb Remote Code Execution Exploit AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Site : http://minb.sf.net Download :...

VidiScript (Avatar) Remote Arbitrary File Upload Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

VidiScript (Avatar) - Arbitrary File Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

pPIM 1.0 - UploadChange Password

pPIM 1.0 - UploadChange Password Ppim = 1.0 upload/change password Multiple Vulnerabilities cript : Ppim v1.0 Download : http://scripts.ringsworld.com/organizers/ppim.zip By Stack Poc 1: change password for change password go to this link http://localhost/ppim/changepassword.php writhe your...

myclan-sql.txt

MyClan Sql Injection AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download : www.sourceforge.net/projects/haudenschilt DORK : Copyright A© 2005-2006...