BLOG:CMS <= v4.2.1e Multiple Vulnerabilities

Exploit for php platform in category web applications Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted Risk...

kemana Mullti Vulnerability

Exploit for php platform in category web applications =========================== kemana Mullti Vulnerability =========================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //...

E-Xoopport 3.1 SQL Injection

= 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":80 Trying again..."; $sock = fsockopen$host,80;...

Joomla! Component Club Manager - 'cm_id' SQL Injection

source: https://www.securityfocus.com/bid/43821/info The Club Manager component for Joomla is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...

Symantec Alert Management System Intel Alert Handler command execution

Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...

CVE-2010-2529

Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...

Sun Java Web Server 7.0 u7 - Remote Overflow

/ Sun Java Web Server Exploit Tested on: Sun Java Web Server 7.0 update 7 - XP SP3 Ref: CVE-2010-0361 This vulnerability was identified by Evgeny Legerov Author: Dominic Chell Date: 23/01/2010 / include "stdafx.h" include include include include include "winsock2.h" pragma commentlib, "ws232"...

Web Application Security Scanner: w3af

w3af is a Web Application Attack and Audit Framework The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. Identify and exploit a SQL injection One of the most difficult parts of securing your application is to identify the...

e107 Code Execution

Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...

Researcher Demos PDF Counter Attacks

Targeted attacks might be tough to prevent, but what if you could fight back against the attacker once he’s infiltrated your network? A researcher has come up with a proof-of-concept PoC that does just that by finding vulnerabilities in the attacker’s malware and using it against him. Read the fu...

AlstraSoft Video Share Enterprise SQL Injection

----------------------------------------------------------------- AlstraSoft Video Share Enterprise SQL Injection Vulnerability ----------------------------------------------------------------- Author : M3NW5 Homepage : http://www.indonesiancoder.org Location : INDONESIA Scripts :...

CPA Site Solutions - Arbitrary File Upload

|REMOTE FILE UPLOAD VULNERABILTY| .:|cpasitesolutions|::. AUTHOR : R3VANBASTARD SITE : www.sux0r.net PROVIDER: http://www.cpasitesolutions.com DORK : intext:Powered by CPA Site Solutions x EXPLOIT:...

PT-2010-2049

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8 Description The issue allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling o...

paFileDB 3.1 Cross Site Scripting Vulnerability

No description provided by source. ======================================================================================== | Title : paFileDB 3.1 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Arcadem Pro 2.8 - 'article' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Arcadem Pro 2.8 Blind SQL Injection Exploit \n"; print " \n"; print " index.php article \n"; print "...

Atlantic SimpleCaddy Shopping Cart Price Manipulation

SENKED-2009-0001 - Atlantic SimpleCaddy Shopping Cart Price Manipulation senked security advisory http://www.senked.com/ Date Published: 2009-07-01 Last Update: 2009-07-01 Advisory ID: SENKED-2009-0001 Bugtraq ID: none CVE Name: none Title: Atlanticintelligence SimpleCaddy Shoopuing Cart Price...

CakePHP 1.1.20 Local File Inclusion

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + CakePHP 1.1.20 Local File Inclusion Vulnerability + + + + Discovered by Cru3l.b0y + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Cru3l.b0y...

FOWLCMS 1.1 (AB/LFI/SU) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= FOWLCMS 1.1 AB/LFI/SU Multiple Remote Vulnerabilities =======================================================...

NetHoteles 3.0 SQL Injection

-------------------------AllaH AkbaR------------------------------- NetHoteles v3.0 ficha.php SQL Injection Vulnerability --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...