1402 matches found
Php Recommend <= 1.3 (AB/RFI/CI) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ Php Recommend "; $d = ""; $content = "".$b."?php // Php Recommmend // Created By Frax.dk // GNU Licens // Please do not delete this text $".$d."page = '".$formpage."';...
PHP Recommend 1.3 Bypass / Inclusion / Injection
Php Recommend "; $d = ""; $content = "".$b."?php // Php Recommmend // Created By Frax.dk // GNU Licens // Please do not delete this text $".$d."page = '".$formpage."'; $".$d."includetemplate = '".$formincludetemplate."'; $".$d."cap = '".$formcap."'; $".$d."title = '".$formtitle."'; $".$d."aula =...
LightBlog 9.9.2 Code Execution
"; 74. 75. $fd = fopen $newaccountfile, "w"; 76. chmod$newaccountfile, 0777; 77. fwrite $fd, $details; 78. fclose$fd; An attacker could be able to inject and execute arbitrary PHP code due to new accounts are saved with "php...
LightBlog 9.9.2 - register.php Remote Code Execution
LightBlog 9.9.2 - register.php Remote Code Execution "; 74. 75. $fd = fopen $newaccountfile, "w"; 76...
LightBlog <= 9.9.2 (register.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =============================================================== LightBlog = 9.9.2 register.php Remote Code Execution Exploit =============================================================== ? /...
Flatchat 3.0 - 'pmscript.php' Local File Inclusion
Flatchat 3.0 pmscript.php with Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Homepage : http://ninjadesigns.co.uk/ + Local File Inclusion - Vulnerable code in pmscript.php -------------------------------------------- $filename =...
Dokeos LMS 1.8.5 PHP Code Injection
striptags$el2'; 108. break; 109. case SORTSTRING : 110. $comparefunction = 'strnatcmpTableSort::orderingstringstriptags$el1...
Dokeos Lms 1.8.5 - 'whoisonline.php' PHP Code Injection
striptags$el2'; 108. break; 109. case SORTSTRING : 110. $comparefunction = 'strnatcmpTabl...
Creasito e-Commerce 1.3.16 (Auth Bypass) SQL Injection Vuln
No description provided by source. Salvatore "drosophila" Fresta + Application: creasito e-commerce content manager + Version: 1.3.16 + Website: http://creasito.bloghosteria.com + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 20 Apr 2009 + Discovered by: Salvatore "drosophila" Fres...
TotalCalendar 2.4 Local File Inclusion
TotalCalendar 2.4 include Local File Inclusion + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion Vulnerable code in cmsdetect.php: ------------------------------------------------------------------------------- Line 26 : $include = isset$REQUEST'include' ?...
Creasito E-Commerce SQL Injection
Salvatore "drosophila" Fresta + Application: creasito e-commerce content manager + Version: 1.3.16 + Website: http://creasito.bloghosteria.com + Bugs: A Authentication Bypass + Exploitation: Remote + Date: 20 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila"...
DNS Tools (PHP Digger) Remote Command Execution Vuln
No description provided by source. + DNS Tools PHP Digger Remote Command Execution + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote Command Execution - Vulnerable code in dig.php ------------------------------------------ $ns = $GET'ns'; system "dig @$ns $host $querytype";...
DNS Tools Remote Command Execution
DNS Tools PHP Digger Remote Command Execution + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote Command Execution - Vulnerable code in dig.php ------------------------------------------ $ns = $GET'ns'; system "dig @$ns $host $querytype";...
DNS Tools (PHP Digger) - Remote Command Execution
DNS Tools PHP Digger - Remote Command Execution + DNS Tools PHP Digger Remote Command Execution + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote Command Execution - Vulnerable code in dig.php ------------------------------------------ $ns = $GET'ns'; system "dig @$ns $host...
DNS Tools (PHP Digger) Remote Command Execution Vuln
Exploit for unknown platform in category web applications ==================================================== DNS Tools PHP Digger Remote Command Execution Vuln ==================================================== + DNS Tools PHP Digger Remote Command Execution + Discovered By SirGod + Remote...
X10Media Mp3 Search Engine < 1.6.2 Admin Access Vulnerability
Exploit for unknown platform in category web applications ============================================================= X10Media Mp3 Search Engine isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so display all forms. / ---------------------------------------- if the...
Family Connections CMS <= 1.8.2 Blind SQL Injection Vulnerability
No description provided by source. Salvatore "drosophila" Fresta + Application: Family Connections + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...
Family Connections 1.8.2 Blind SQL Injection (Correct Version)
Salvatore "drosophila" Fresta + Application: Family Connection + Version: = 1.8.2 + Website: http://www.familycms.com + Bugs: A Blind SQL Injection + Exploitation: Remote + Date: 1 Apr 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore "drosophila" Fresta + Contact: e-mail:...
CVE-2008-6547
schema.py in FormEncode for Python python-formencode 1.0 does not apply the chainedvalidators feature, which allows attackers to bypass intended access restrictions via unknown vectors...
BandSite CMS 1.1.4 (members.php memid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== BandSite CMS 1.1.4 members.php memid SQL Injection Vulnerability ================================================================== + Remote SQL Injection - The script is...