Pluxml 0.3.1 Remote Code Execution Exploit

?php This file require the PhpSploit class. If you want to use this class, the latest version can be downloaded from acid-root.new.fr. Note: The new version is compatible with PHP 4 by default. errorreportingEALL ^ ENOTICE; require'phpsploitclass.php'; C: sploit.php -url...

mybb-exec.txt

!/usr/bin/php escapestring. They don't corrected the function this is a choice ... the bad and they forgot to correct 1 only SQL request. They must correct the problem at the source = if$argc URL: http://www.acid-root.new.fr/ -----------------------------------------------------------------------...

webSPELL 4.01.02 - PHP Remote Code Execution

webSPELL 4.01.02 - PHP Remote Code Execution !/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -file Options Params: -url For example http://victim.com/webspell/ -file The file you wanna upload c99shell.php...

nukesentinel-disclose.txt

!/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ Support us: Just click once on our publicity ; ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -url...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt...

CVE-2006-3151

CVE-2006-3151 is a cross-site scripting (XSS) vulnerability in AssoCIateD (ACID) 1.2.0 and earlier. It affects index.php via the menu parameter, allowing remote attackers to inject arbitrary web script or HTML. No remediation or exploit details are provided in the connected documents.

CVE-2006-3151

Cross-site scripting XSS vulnerability in index.php in AssoCIateD aka ACID 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter...

NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure

// Script Web -------- www.npds.org versions --- NPDS = 5.10 Solutions -- None official Note ------- Vendor has been contacted // Local Inclusion http://.../header.php?DefaultTheme=../apache/logs/error.log00...

CVE-2006-2841

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...

EUVD-2006-2838

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...

CVE-2006-2841

Multiple PHP remote file inclusion vulnerabilities in AssoCIateD aka ACID CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 menu.php, 2 profile.php, 3 users.php, 4 cachemngt.php, and 5 galleryfunctions.php...

CVE-2006-2841

CVE-2006-2841 affects AssoCIateD (aka ACID) CMS 1.1.3. The vulnerability is a set of PHP remote file inclusion weaknesses that allow an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter to five scripts: menu.php, profile.php, users.php, cache_mngt.php, and galle...

AssoCIateD CMS 1.1.3 (root_path) Remote File Include Vulnerability

No description provided by source. DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi Special greet...

AssoCIateD CMS 1.1.3 - ROOT_PATH Remote File Inclusion

AssoCIateD CMS 1.1.3 - ROOTPATH Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko,...

ACID v1.1.3 CMS (root_path) - Remote File Include Vulnerabilities

DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi Special greetz DragonHeart : Contact:...

AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM ACID v1.1.3 CMS rootpath - Remote File Include Vulnerabilities Script site: http://herve.labas.free.fr/acid/en/ Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi Special greetz DragonHeart : Contact:...

AssoCIateD CMS 1.1.3 (root_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== AssoCIateD CMS 1.1.3 rootpath Remote File Include Vulnerability ================================================================== DEVIL TEAM THE BEST POLISH TEAM ACID v1.1...

CVE-2006-1590

Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...

Cross site scripting

Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...

CVE-2006-1590

Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...