Camera Life 2.6.2b4 - Arbitrary File Upload

CameraLife-2.6.2b4 Arbitrary File Upload Vulnerability + Author:Mi4night + Version:cameralife-2.6.2b4 + Download Script: + http://sourceforge.net/project/showfiles.php?groupid=70910&packageid=70316&releaseid=628868 + Exploit: +...

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users...

vikingboard-sql.txt

--------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

Vikingboard 0.2 Beta - SQL Column Truncation

--------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

oblog4.6添加后台管理员漏洞

oblog4.6在处理相关数据时存在漏洞 造成可以添加后台管理员。 oblog4.6 sql版 http://www.oblog.cn/ 1、注册一个用户，用户名script，密码123456 2、发布一篇日志，日志标题：测试一下 3、个人前台首页找到日志"测试一下"，点"推荐" 4、个人后台管理，选择"常用"选项中的"推荐日志"，然后点"测试一下"日志后面的修改，把摘要内容修改成： s'//WHERE/ /logid=1;insert//into//oblogadmin//username,pa...

XchangeBoard 1.70 - boardID SQL Injection

XchangeBoard 1.70 - boardID SQL Injection xchangeboard 1.70 final and lower Bug by: haZl0oh Dork: "Powered by xchangeboard" info:you have to be an registered user to use it like this !!!! there should be a lot more vulns there ; credentials like passwords are saved as cookies .... :D PoC:...

BlogPHP 2.0 - Privilege Escalation / SQL Injection

!/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to http://127.0.0.1/BlogPHPv2/index.php?act=register2 with:...

Hosting Controller <= 0.6.1 Unauthenticated User Registration Exploit

No description provided by source. !-- Tested google = intext:"powered by Hosting Controller" intitle:"Hosting Controller" /str0ke Advisory Information ------------------------- Software Package : Hosting Controller Vendor Homepage : http://www.hostingcontroller.com Platforms : Windows based...

Unfixed XSS vulnerability at www.efiliale.de

Security researcher mebx, has submitted on 26/05/2008 a cross-site-scripting XSS vulnerability affecting www.efiliale.de, which at the time of submission ranked 115634 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2008. It is currently...

CaLogic Calendars 1.2.2 (langsel) Remote SQL Injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

Multiple vulnerabilities in extension Frontend User Registration (sr_feuser_register)

It has been discovered that the extension Frontend User Registration srfeuserregister is susceptible to Cross Site Scripting XSS attacks and allows Remote Command Execution. Component Type: Third party extensions. These extensions are not part of the TYPO3 default installation. Affected Versions:...

CaLogic Calendars 1.2.2 - 'langsel' SQL Injection

/---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

Mega File Hosting Script 1.2 - 'fid' SQL Injection

Script: Mega File Hosting script Type: SQL Injection 1923TURK.ORG TURKiSHWARRiORR Step 1: Register an account Step 2: login and go to /members.php?folders=1 Step 3: Create a folder with any name Exploitation options: ADIM 1:...

AuraCMS 2.x - user.php Security Code Bypass Arbitrary Add Administrator

AuraCMS 2.x - user.php Security Code Bypass Arbitrary Add Administrator !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x user.php - Security Code Bypass & Add Administrator Exploit Waktu : Feb 28 2008 08:00PM Software : AuraCMS Versi : 2.0 2.1...

WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability

WoltLab Burning Board 3.0.3 PL1 SQL Injection Vulnerability by NBBN Vendor: http://woltlab.de ::Proof of Concept http://site.tld/wbb3/index.php?page=PMList&folderID=0&pageNo=1&sortField=isViewed&sortOrder=ASC, SELECT password FROM wcf1user WHERE userID=1 AND...

alitalk-multi.txt

ALITALK v 1.9.1.1 Multiple Vulnerabilities author : tomplixsee google dork : POWERED BY ALITALK download : http://www.alilg.com/software/free-php-ajax-chat/ SQL INJECTION you need to login in order to exploit this vulnerability vulnerable code on inc/receivertwo.php "; echo" r%dtr...

ALITALK 1.9.1.1 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== ALITALK 1.9.1.1 Multiple Remote Vulnerabilities =============================================== ALITALK v 1.9.1.1 Multiple Vulnerabilities author : tomplixsee google dork : POWERED BY ALITALK...

alitalk 1.9.1.1 - Multiple Vulnerabilities

alitalk 1.9.1.1 - Multiple Vulnerabilities ALITALK v 1.9.1.1 Multiple Vulnerabilities author : tomplixsee google dork : POWERED BY ALITALK download : http://www.alilg.com/software/free-php-ajax-chat/ SQL INJECTION you need to login in order to exploit this vulnerability vulnerable code on...

alitalk 1.9.1.1 - Multiple Vulnerabilities

ALITALK v 1.9.1.1 Multiple Vulnerabilities author : tomplixsee google dork : POWERED BY ALITALK download : http://www.alilg.com/software/free-php-ajax-chat/ SQL INJECTION you need to login in order to exploit this vulnerability vulnerable code on inc/receivertwo.php "; echo" r%dtr...

Sql injection

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary users via a request to hosting/addsubsite.asp with the loginname and password parameters set, when preceded by certain requests to hosting/default.asp and hosting/selectdomain.asp, a related issue to...