896 matches found
CVE-2008-1866
The CVE-2008-1866 issue affects Blog Pixel Motion (PixelMotion), where admin/modif_config.php does not require admin authentication. This allows remote authenticated users to upload arbitrary PHP scripts inside a ZIP archive, which is written to templateZip/ and then automatically extracted under...
KnowledgeQuest 2.6 - SQL Injection
KnowledgeQuest 2.6 - SQL Injection ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all...
KnowledgeQuest 2.6 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================ KnowledgeQuest 2.6 SQL Injection Vulnerabilities ================================================ ...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... -------- Discoverd By...
KnowledgeQuest 2.6 - SQL Injection
...:::::KnowledgeQuest 2.6 SQL Injection Vulnerabilities ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in...
phpaddressbook-sql.txt
php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...
php-addressbook v2.0 SQL Injection Vulnerbility
php-addressbook v2.0 SQL Injection Vulnerbility admin Authentication bypass Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in the...
Help Center Live < 2.1.5 Admin Authentication Bypass
Binary data 4162.prm...
JBlog 1.0 - Create / Delete Admin Authentication Bypass
xss Here&pcomm=com cookies Manipulation: -------------------- The POST variable 'search' in /jblog/recherche.php also The Cookie variable 'theme' is affected and can be set to : also we can do this : ' or : ' This is a small exemple of Inject Cookie Xploit Cookie Manipulation ----------------...
Rookie looking for a loophole---the penetration site of“reflection”-vulnerability warning-the black bar safety net
Things causes is QQ a friend sent me a site, say like there is a loophole, because this friend is just contact the network security aspect, I took to the site a look, really the so-called porous yeah, of course this site is not going to be the little black miss home obviously be people hanging on...
CVE-2007-3451
PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
Net Portal Dynamic System NPDS 5.10 - Remote Code Execution 1 !/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox';...
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution
Exploit for unknown platform in category web applications ============================================================== Net Portal Dynamic System NPDS Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $p...
Net Portal Dynamic System (NPDS) 5.10 - Remote Code Execution (1)
!/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox'; if$pro $xpl-proxy$pro; if$pra $xpl-proxyauth$pra; +print.php S...
liens_dynamiques xss and admin authentification
liensdynamiques xss and admin authentification By : sn0oPy Risk : high Site : http://xentraz.free.fr/ Dork : "liensdynamiques" | "liensdynamiques2.1" exploit : + inject any script on the add menu "liens.php3?ajouter=1", you cas del it without admin permission one the del menu...
EternalMart Guestbook 1.10 (admin/auth.php) Remote Inclusion Vuln
Exploit for unknown platform in category web applications ================================================================= EternalMart Guestbook 1.10 admin/auth.php Remote Inclusion Vuln ================================================================= EternalMart Guestbook 1.1.0 emgbadminpath...
CVE-2006-5592
Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx"...
gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
Exploit for unknown platform in category web applications ========================================================== gCards languageredirect == $SERVER'PHPSELF' if isset$GET'setLang' $SESSION'setLang' = $GET'setLang'; $langFile = $page-relpath.'inc/lang/'.$lang$SESSION'setLang''file'; if...
gCards <= 1.45 Multiple Vulnerabilities All-In-One Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "gCards = 1.45 multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "Sun-Tzu:"At first, then, exhibit the coyness of a maiden, until the\r\n";...
Nodez <= 4.6.1.1 Mercury Multiple Remote Vulnerabilities
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Nodez 4.6.1.1 Mercury possibly prior versions multiple vulnerabilities\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; / software: site: nodez.greentinted.com/...