252 matches found
phpagtc-admin.txt
!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...
feedback-sql.txt
--==+================================================================================+==-- --==+ Feedback and Rating Script 1.0 detail.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...
Affiliate Directory (cat_id) Remote SQL Injection Vulnerbility
No description provided by source. --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...
Affiliate Directory - cat_id SQL Injection
Affiliate Directory - catid SQL Injection --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8u...
FaScript FaPhoto v1 (show.php id) SQL Injection Vulnerability
No description provided by source. AUTHOR : IRCRASH Dr.Crash...
FaScript FaPhoto 1.0 - show.php SQL Injection
FaScript FaPhoto 1.0 - show.php SQL Injection AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile...
FaScript FaPhoto 1.0 - 'show.php' SQL Injection
AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile Function in mysql and see admin Username and...
FaScript FaPhoto v1 (show.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= FaScript FaPhoto v1 show.php id SQL Injection Vulnerability ============================================================= AUTHOR : IRCRASH Dr.Crash Script Download :...
FaScript FaMp3 v1 (show.php) Remote SQL Injection Vulnerability
No description provided by source. FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHO...
FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability
No description provided by source. FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash&nb...
PHP-RESIDENCE 0.7.2 - Search SQL Injection
PHP-RESIDENCE 0.7.2 - Search SQL Injection PHPRESIDENCE 0.7.2 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH R3d.W0rm Script Download : http://www.digitaldruid.net/download/php-residence0.7.2.zip Vulnerability Page:...
faname-sql.txt
FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file...
PixelPost 1.7 - Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc3 print "-------------------------------------------------------------------------\r\n"; print " PixelPost 1.7 Blind SQL Injection...
FaScript FaName v1 (page.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ FaScript FaName v1 page.php Remote SQL Injection Vulnerability ================================================================ FaScript FaName v1 Remote Sql Injection BY...
FaScript FaPersianHack 1.0 - SQL Injection
FaScript FaPersianHack 1.0 - SQL Injection FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianhack.zip Injection Adress : http://Sitename/ph/show.php?id= Help : In This Script Admin Username and Password Save in...
FaScript FaName 1.0 - SQL Injection
FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file...
Directory traversal
Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...
CVE-2007-6662
Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...
CVE-2007-6662
CVE-2007-6662 affects CuteNews 2.6, via a directory traversal vulnerability in file.php that allows reading arbitrary files by supplying .. in the file parameter. Exploitation demonstrated by accessing data/users.db.php to reveal admin username and password hash. Root cause is improper sanitizati...