TSP 0.1d Multiple File Inc Vulnerability / Admin Credentials Disclosure

Exploit for php platform in category web applications =========================================================================== TSP 0.1d Multiple File Include Vulnerability / Admin Credentials Disclosure =========================================================================== Exploit Title:...

Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net

Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

Sphider <= 1.3.4 shell upload vulnerability

Exploit for unknown platform in category web applications =========================================== Sphider Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site...

CD Rentals SQL Injection

/ ! CD Rentals Script SQL injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date & Time : Thu Feb 10, 2010 5:55 PM ! Rock On : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Vacation Rental Script - SQL Injection

Vacation Rental Script - SQL Injection ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Vacation Rental Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

CMS Boys SQL Injection

/ Name : CMS BOYS id Multiple SQL Injection WebSite : http://www.cmsboys.com/ Demo : http://www.cmsboys.com/democms/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , PR0f.SELLIM , Dyle , Achille Dark3r , geeksec.com / 1st : File : newsdetail.php , GET : id...

PHPBB 3.0 SQL 0day-vulnerability warning-the black bar safety net

Code not tested as to use the moderator privileges of users can perform !/ usr/bin/php-q-d shortopentag=on 1 2 6 $result.=" ."; else $resu...

PHPBB 3.0 0day

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure\n"; echo "by Hackerz5 [email protected]\n"; echo "site: http://hackerz5.com\n"; echo "dork, version specific: "Powered by phpBB 2002,...

CMScontrol 7.x File Upload

Exploit for unknown platform in category web applications ========================== CMScontrol 7.x File Upload ========================== CMScontrol 7.x File Upload Author : Cyber945 Bug Type : File Upload Infection : Adminin bilgileri alinabilir. Dork : inurl:"index.php?idmenu="...

Zeeways Technology (product_desc.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Zeeways Technology productdesc.php SQL Injection Vulnerability ================================================================= Zeeways Technology productdesc.php SQL...

YP Portal MS-Pro Surumu 1.0 Database Disclosure

======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | DAte : 16/12/200...

D-Tendencia Bt 2008 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== D-Tendencia Bt 2008 SQL Injection Vulnerability =============================================== / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

Mail Manager Pro XSRF (Change Admin Password)

Exploit for unknown platform in category web applications ============================================= Mail Manager Pro XSRF Change Admin Password ============================================= ----------------------------------------------------------------------------------------------- Title:...

Dow Group (new.php) SQL Injection

No description provided by source. ===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

Allomani Movies Clips 2.7.0 - Blind SQL Injection

Allomani Movies Clips 2.7.0 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani movies & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.co...

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...

ZenPhoto 1.2.5 - Completely Blind SQL Injection

/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...