AV Tutorial Script 1.0 - Remote User Pass Change

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i...

NavBoard 2.6.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ NavBoard 2.6.0 Remote Code Execution Exploit ============================================ "; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print "";...

r2k-disclose.txt

\|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- ! Portal...

monalbum-exec.txt

"; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase = $POST'gcfgBase'; $gcfgUser = $POST'gcfgUser'; $gcfgPass = $POST'gcfgPass'; $gcfgHote = $POST'gcfgHote'; $gpage = $POST'gpage'; $grepertoire = $POST'grepertoire'; $gfond = $POST'gfond'; $gtitre =...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso, has submitted on 05/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1053645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is currently...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

1024CMS-disclose.txt

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...

1024 CMS 0.7 - download.php Remote File Disclosure

1024 CMS 0.7 - download.php Remote File Disclosure '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor :...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...

PHP-Ring Webring System 0.9 - SQL Injection

Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: uPHPringwebsite Download.....: http://www.undoweb.frih.net , http://undoweb.frih.net/downloads/uPHPringwebsite.zip...

PHP-Ring Webring System 0.9 - SQL Injection

PHP-Ring Webring System 0.9 - SQL Injection Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: uPHPringwebsite Download.....: http://www.undoweb.frih.net ,...

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: jchit counter v1.0.0 Download.....:...

jGallery 1.3 (index.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ jGallery 1.3 index.php Remote File Inclusion Vulnerability ============================================================...

Battle.net Clan Script for PHP 1.5.1 - SQL Injection

Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...

CVE-2006-5977: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2005-4008: Undefined Security Weakness

SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...

CVE-2005-2673: Undefined Security Weakness

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...