3263 matches found
WordPress Core 2.1.2 - 'xmlrpc' SQL Injection
!/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when exploting with the credentials of a val...
Active Photo Gallery - 'catid' SQL Injection
Title : Active Photo Gallery Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivephotogallery Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=11 Vuln. Username :...
GLSA-200703-04 : Mozilla Firefox: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200703-04 Mozilla Firefox: Multiple vulnerabilities Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects Mozilla Firefox 2 only. Various researchers reported some errors in the JavaScript...
Rigter Portal System (RPS) 6.2 - Blind SQL Injection
? //RPS 6.2 SQL Injection Exploit //http://www.rps-project.com/ //Need magicquotesgpc = Off; //by s0cratex //Contact: s0cratexathotmaildotcom //Salu2: rgod, 0pt1x 'n mechas. errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $host = "localhost"; $path="/rps"; $id=1; echo...
Coppermine Photo Gallery 1.3.x - Blind SQL Injection
"; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0 for$i=0;$i255;$i++ $xpl = "'' OR 1=SELECT IFASCIISUBSTRINGuserpassword,".$a...
Jupiter CMS 1.1.5 - 'Client-IP' SQL Injection
URL: http://www.acid-root.new.fr/advisories/12070214.txt / errorreportingEALL ^ ENOTICE; $url = 'http://localhost/jupiter/'; $xpl = new phpsploit; $xpl-agent"Mozilla"; $hev = "-1' UNION SELECT CONCAT'" ."BEGINXPLUSER'," ."SELECT username FROM users LIMIT 0,1,'" ."ENDXPLUSER','" ."BEGINXPLPWD',"...
philboard 1.14 - 'philboard_forum.asp' SQL Injection
---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp" ----------------------------------------------------...
SpotLight CRM 1.0 - login.asp SQL Injection
SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...
NuRems 1.0 (propertysdetails.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== NuRems 1.0 propertysdetails.asp Remote SQL Injection Exploit ============================================================== !/usr/bin/perl Script Name: NuRems 1.0...
Webdrivers Simple Forum (message_details.php) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Webdrivers Simple Forum messagedetails.php SQL Injection Exploit =================================================================== !perl use IO::Socket; By:Bl0od3r Germa...
opendocman-1.2rc3.txt
opendocman = 1.2rc3 Bypass admin/user Login affected to opendocman-1.2p3 Download Source : http://www.opendocman.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $frmuser = $POST'frmuser'; $frmpass = $POST'frmpass'; $query =...
CVE-2006-5161
IBM Client Security Password Manager stores and distributes saved passwords based upon the title of a website, which allows remote attackers to obtain username and password credentials by changing the title of an HTML page...
WTcom 0.2.4-alpha - torrents.php SQL Injection
WTcom 0.2.4-alpha - torrents.php SQL Injection WebTorrent WTcom Script Remote SQL Injection Every Username, Password and Email ---------------------------------- Author: sh1r081 sh1r081atgmail.com...
JVN#62307185 QwikiWiki cross-site scripting vulnerability
Impact An arbitrary script may be executed on the user's web browser. User credentials could be leaked as a result. Solution Products Affected QwikiWiki version 1.5.5 and earlier...
Microsoft Office Excel File Rebuilding Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires that the attacker coerce the target into opening a malicious .XLS file. The specific flaw exists within the rebuilding of malformed cell comments. When Excel...
ciscoCall.txt
I. SYNOPSIS Release Date: 07/19/2006 Affected Application: Cisco CallManager 3.1 and up versions prior to 3.1 were not tested but may still be vulnerable Severity If Exploited: High Impact: Arbitrary configuration of phone system/Theft of individual phone users' credentials Mitigating Factors:...
FunkBoard CF0.71 - profile.php Remote User Pass Change
FunkBoard CF0.71 - profile.php Remote User Pass Change /str0ke -- Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...
Design/Logic Flaw
VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges...
Information disclosure
admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...