Sun One WebServer 6.1 - .JSP Source Viewing

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Swinger Club Portal - start.php?id SQL Injection

Swinger Club Portal - start.php?id SQL Injection source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these...

Swinger Club Portal - 'start.php?go' Remote File Inclusion

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

Swinger Club Portal - 'start.php?id' SQL Injection

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

Swinger Club Portal - start.php?go Remote File Inclusion

Swinger Club Portal - start.php?go Remote File Inclusion source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

Sun One 6.1 JSP Source Disclosure

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Sun One WebServer 6.1 JSP Source Viewing vulnerability

Sun One WebServer 6.1 JSP Source Viewing vulnerability System: Sun-ONE-Web-Server/6.1, Windows Server 2003 SunOne WebServer formerly Netscape Enterprise Server, iPlanet on Windows Systems lets remote people disclose JSP Source code. A normal URL would look like: http://server/hello.jsp To disclos...

Sun One WebServer source code disclosure

It's possible to obtains page source code via alternate NTFS streams http://server/hello.jsp::$DATA...

Multiple HTTP Server Low Bandwidth Denial of Service #2

No description provided by source. ?php / DOS for the vulnerbility at http://isc.sans.org/diary.html?storyid=6601 I wrote it in PHP because I find it funny to make PHP attack apache... I set it at 200 processes and it kill my test servers pretty quick. have fun kiddiez... greetz: m1m1, t4dp0le,...

Multiple HTTP Server Low Bandwidth Denial of Service #2

Exploit for multiple platform in category dos / poc ======================================================= Multiple HTTP Server Low Bandwidth Denial of Service 2 ======================================================= \n"; die; / Hangs the connection to the webserver @param $server string @retur...

Multiple HTTP Server - Low Bandwidth Denial of Service (2)

Multiple HTTP Server - Low Bandwidth Denial of Service 2 \n"; die; / Hangs the connection to the webserver @param $server string @return void / function killTheFucker$server $request = "GET / HTTP/1.1\r\n"; $request .= "Host: $server\r\n"; $request .= "User-Agent: Mozilla/4.0 compatible; MSIE 7.0...

phpWebThings 'module' Parameter Local File Include Vulnerability

phpWebThings is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process, which may aid in further attacks. phpWebThings 1.5.2 i...

eliteCMS multiple Vulnerabilities

eliteCMS is prone to a vulnerability that lets attackers upload and execute arbitrary PHP code. The application is also prone to a cross-site scripting issue and to a SQL Injection Vulnerability. These issues occur because the application fails to sufficiently sanitize user-supplied input...

i-Gallery 3.44.1 - streamfile.asp Multiple Directory Traversal Vulnerabilities

i-Gallery 3.44.1 - streamfile.asp Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/44467/info i-Gallery is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a speciall...

i-Gallery 3.4/4.1 - 'streamfile.asp' Multiple Directory Traversal Vulnerabilities

source: https://www.securityfocus.com/bid/44467/info i-Gallery is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to download and read...

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal

212Cafe WebBoard 2.90 Beta - view.php Directory Traversal source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with...

212Cafe WebBoard 2.90 Beta - 'view.php' Directory Traversal

source: https://www.securityfocus.com/bid/44510/info 212cafe WebBoard is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory-traversal sequences '../' to retrieve and read...

Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit (pl)

No description provided by source. !/usr/bin/perl -W Microsoft IIS 6.0 WebDAV Remote Authentication Bypass Exploit written by ka0x ka0x01alt+64gmail.com Advisory: http://www.milw0rm.com/exploits/8765 Greets: an0de, Piker, xarnuz, NullWave07, Pepelux, k0rde, JoSs, Trancek and others! use IO::Socke...

Zervit Webserver 0.04 Buffer Overflow

!/usr/bin/perl Zervit webserver 0.4 Bof Poc make it just for fun :s use LWP::Simple; use LWP::UserAgent; if @ARGV \n"; print"TARGETS are\n "; print"Example: perl $0 127.0.0.1 777 \n"; exit1; $target, $port = @ARGV; print"Zervit Webserver 0.04 bof xpl : Coded by Stack!\n"; print"Attacking $target ...

Zervit Webserver 0.04 (GET Request) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Zervit webserver 0.4 Bof Poc make it just for fun :s use LWP::Simple; use LWP::UserAgent; if @ARGV 2 print"Usage: $0 url port\n"; print"TARGETS are\n "; print"Example: perl $0 127.0.0.1 777 \n"; exit1; $target, $port = @ARGV; print"Zervit Webserve...