2003 matches found
phpcrs <= 2.06 / Local File Inclusion Vulnerability (this is the correct :)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download: http://sourceforge.net/projects/phpcrs/ Found by Pepelux...
7Shop 1.1 - Arbitrary File Upload
!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . ".php"; int.. yes i know PU! print Spoofing + + Discovered && Coded By: t0pP8uZz + + + + Contact IRC: irc.rizon.net sectalk + + Vendor not notified! Later versions maybe vuln! + + + +...
7Shop 1.1 - Arbitrary File Upload
7Shop 1.1 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . ".php"; int.. yes i know PU! print Spoofing + + Discovered && Coded By: t0pP8uZz + + + + Contact IRC: irc.rizon.net sectalk + + Vendor not notified! Lat...
Joekoe(乔客CMS)3.0Sql注入漏洞
JoekoeCMS3在获取客户端浏览器类型参数User-agent时没有严格过滤，导致在引入查询时可以通过修改数据包构造特殊的user-agent值来达到添加后台管理员等目的。 JoekoeCMS3将所有类都封装在了一个JoekoeCMS3b.dll的Dll中， Joekoe是通过cls.ipsys1来获取客户端的User-Agent，所以在其程序中调用cls.ipsys1并放入SQL查询的页面\common\review.asp、\forum\post.asp、\forum\inc\incpost.asp均存在此漏洞。...
phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...
LoudBlog <= 0.8.0a (ajax.php) SQL Injection Vulnerability (auth)
No description provided by source. !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgen...
MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...
LoudBlog 0.8.0a - 'ajax.php' SQL Injection
!/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgent; use Digest::MD5 qwmd5hex; $ua =...
phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== phpcrs = 2.06 importFunction Local File Inclusion Vulnerability ==================================================================...
phpcrs-lfi.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...
phpcrs 2.06 - importFunction Local File Inclusion
phpcrs 2.06 - importFunction Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154...
LoudBlog 0.8.0a - ajax.php SQL Injection
LoudBlog 0.8.0a - ajax.php SQL Injection !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use...
phpcrs 2.06 - 'importFunction' Local File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...
Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x ...
IP Reg <= 0.4 Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...
phsBlog 0.2 - Bypass SQL Injection Filtering
phsBlog 0.2 - Bypass SQL Injection Filtering !/usr/bin/perl ---------------------------------------------------------------- Script : PhsBlog v0.2 Type : Bypass Sql injection Filtering Exploit Method : GET Risk : High ---------------------------------------------------------------- Discovered by ...
Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection
!/usr/bin/perl ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Multiple Vulnerabilities Xss/Login Bypass/Sql injection Exploit/File Disclosure Method : GET Alert : High Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="...
Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)
!/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO necessary authentication, which will...
Pligg <= 9.9.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================ Pligg new; $http-agent'Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1 Gecko/2008070208 Firefox/3.0.1'; $http-envproxy; cookiejar; my $host = $args'h' || usage; Host flag. Specify the...