mypicgallery-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

feedback-sql.txt

--==+================================================================================+==-- --==+ Feedback and Rating Script 1.0 detail.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

Affiliate Directory (cat_id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Affiliate Directory - cat_id SQL Injection

Affiliate Directory - catid SQL Injection --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8u...

FaScript FaPhoto v1 (show.php id) SQL Injection Vulnerability

No description provided by source. AUTHOR : IRCRASH Dr.Crash...

FaScript FaPhoto v1 (show.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= FaScript FaPhoto v1 show.php id SQL Injection Vulnerability ============================================================= AUTHOR : IRCRASH Dr.Crash Script Download :...

FaScript FaPhoto 1.0 - show.php SQL Injection

FaScript FaPhoto 1.0 - show.php SQL Injection AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile...

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile Function in mysql and see admin Username and...

FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability

No description provided by source. FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash&nb...

PHP-RESIDENCE 0.7.2 - Search SQL Injection

PHP-RESIDENCE 0.7.2 - Search SQL Injection PHPRESIDENCE 0.7.2 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH R3d.W0rm Script Download : http://www.digitaldruid.net/download/php-residence0.7.2.zip Vulnerability Page:...

faname-sql.txt

FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file...

FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability

No description provided by source. FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHO...

PixelPost 1.7 - Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc3 print "-------------------------------------------------------------------------\r\n"; print " PixelPost 1.7 Blind SQL Injection...

FaScript FaPersianHack 1.0 - SQL Injection

FaScript FaPersianHack 1.0 - SQL Injection FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianhack.zip Injection Adress : http://Sitename/ph/show.php?id= Help : In This Script Admin Username and Password Save in...

FaScript FaName v1 (page.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FaScript FaName v1 page.php Remote SQL Injection Vulnerability ================================================================ FaScript FaName v1 Remote Sql Injection BY...

FaScript FaName 1.0 - SQL Injection

FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file...

Directory traversal

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

CVE-2007-6662

CVE-2007-6662 affects CuteNews 2.6, via a directory traversal vulnerability in file.php that allows reading arbitrary files by supplying .. in the file parameter. Exploitation demonstrated by accessing data/users.db.php to reveal admin username and password hash. Root cause is improper sanitizati...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...