5496 matches found
Nitro Web Gallery 1.4.3 - 'section' SQL Injection
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...
xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability
No description provided by source. -+================================================================================+- -+ xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...
xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ========================================================= xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability =========================================================...
SHOUTcast Admin Panel 2.0 - 'page' Local File Inclusion
============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Flat Calendar v1.1 Remote Permission Bypass Vulnerability
Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All iзin yaklak 654.000 sonuзtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...
xeCMS 1.0.0 RC2 - Insecure Cookie Handling
-+================================================================================+- -+ xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 18 MAY 2008 Script...
SHOUTcast Admin Panel 2.0 - page Local File Inclusion
SHOUTcast Admin Panel 2.0 - page Local File Inclusion ============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | |||||||||...
xeCMS 1.0.0 RC2 - Insecure Cookie Handling
xeCMS 1.0.0 RC2 - Insecure Cookie Handling -+================================================================================+- -+ xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: t0pP8u...
Shoutcast Admin Panel 2.0 (page) Local File Inclusion Vulnerability
No description provided by source. ============================================================ Shoutcast Admin Panel 2.0 Local File Inclusion Vulnerability ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...
Shoutcast Admin Panel 2.0 (page) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Shoutcast Admin Panel 2.0 page Local File Inclusion Vulnerability ===================================================================...
phpeasydata-sqlxss.txt
------------- PHPEasyData ------------- Informations : Langage : PHP Version : 1.5.4 Website : http://www.phpeasydata.com/ Problems : Multiple vulnerabilities Description: PHPEasyData is a PHP application which allow you to manage and display on the web your dynamics data and directories. Details...
EasyWay CMS - mid SQL Injection
EasyWay CMS - mid SQL Injection php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+...
EasyWay CMS (index.php mid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== EasyWay CMS index.php mid Remote SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiti...
Azuresites CMS - Multiple Vulnerabilities
AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...
Azuresites CMS - Multiple Vulnerabilities
Azuresites CMS - Multiple Vulnerabilities AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...
azuresites-sql.txt
AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...
EasyWay CMS - 'mid' SQL Injection
php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+'; for $i = 25; $i=1; $i-- $sour...
MeltingIce File System <= 1.0 Remote Arbitrary Add-User Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly because alot of...
MeltingIce File System 1.0 - Arbitrary Add User
MeltingIce File System 1.0 - Arbitrary Add User !/usr/bin/perl use strict; use LWP::UserAgent; NOTE: user a pretty uniqe username, has the script will say successfull if a username aready existed! NOTE: exploit is mainly to get a nice quota, but it can also to be used to add a user primeraly...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Maian Support 1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 msgscript, 2 msgscript2, and 3 msgscript3 parameters to admin/inc/footer.php; and the 4 msgscript2 parameter to admin/inc/header.php...