FreeIPA: CSRF vulnerability

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

ABUS TVIP 11550/21550 Multiple vulnerabilities (and possibly other ABUS cams)

Title : ABUS TVIP 11550/21550 Multiple vulnerabilities and possibly other ABUS cams Author : Marco van Berkum - Summary - Arbitrary file read - Arbitrary file upload - Arbitrary command excution input validation bug - How it's totally compromised including ssh root login. - Summary The ABUS 11550...

Ayco Resim Galeri SQL Injection

Exploit Title: Ayco Resim Galeri Open Source SQL Injection Vulnerability Google Dork: n/a Date: 18.09.2011 Author: m3rciL3Ss Software Link:http://www.ay-computer.com.tr/aycoresimgaleriveaycookul.asp Version: Tested on:http://resimgaleri.ay-computer.de/ Exploit:...

Novatek SQL Injection

================================================= Novatek sezioni.php SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

V5shop injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability to harm: the high-risk A vulnerability file: cart. aspx Search keywords: inurl:scoreindex. aspx exp: the /cart. aspx? act=buy&id=1 and Select Top 1 char1 2 4%2BisNullcastName as varchar8 0 0 0,char3 2%2Bchar1 2 4%2BisNullcastPass as varchar8 0 0 0,char3 2%2Bchar1 2 4 From Select Top...

Alahliclub SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

http-axis2-dir-traversal NSE Script

Exploits a directory traversal vulnerability in Apache Axis2 version 1.4.1 by sending a specially crafted request to the parameter xsd BID 40343. By default it will try to retrieve the configuration file of the Axis2 service '/conf/axis2.xml' using the path '/axis2/services/' to return the userna...

phpcms v2.4 SQL injection exploit

No description provided by source. 1.vbs ------------------------------------------------------------------- on error resume next Set objArgs = WScript.Arguments dim myhttp dim mypath dim fjhgx printr if objArgs.length = 0 then quitprint End if if objArgs0 = null then quitprint Else myhttp =...

JaManaGe enterprise built Station system v2. 0 injection vulnerability-vulnerability warning-the black bar safety net

By:Mr. DzY date:2011/06/11 aManaGe the enterprise built Station system with perfect enterprise website background management functions, can through the background simple operation to achieve a large amount of information updated. Finished Good system, products, news, talent, and customer service...

Web Application SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla 1.6.0 SQL Injection

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection Exploit', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage the SQL...

Smsgwadapter Server Admin Credentials Revealed !

Smsgwadapter Server Admin Credentials Revealed ! A Indian hacker, hack into the one of the SMS Server Smsgwadapter at 122.165.52.84 IP address. According to the hacker, This is the most unsecured Server got owned by a simple password guessing. In screenshot you can see the desktop of same server...

Joomla 1.6.0 SQL Injection / PHP Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection - PHP Execution', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage...

iwebshop0. 7. 7 injection 0day-vulnerability warning-the black bar safety net

Use method: 1, the first casual look at a product,and then access the 2, the use of cookies by the browser, you will find inside will be more similar to"iwebhisgoods2 2this number is your access to the product id=1 2 8 2 2 8 2 7 6 2"Project 3, the first in the"2 2"rear add a single quotes, so tha...

Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

JAF-CMS 4.0_RC_2 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

Skadate Multiple Persistent Cross Site Scripting Vulnerabilities (Undisclosed New Vulnerability)

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

Skadate Cross Site Scripting

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

DGNews 2.1 - SQL Injection

DGNews 2.1 - SQL Injection Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...