PilusCart 1.4.1 - Cross-Site Request Forgery (Add Admin)

Exploit Title: PilusCart 1.4.1 - Cross-Site Request Forgery Add Admin Google Dork: N/A Date: 10-03-2019 Exploit Author: Gionathan "John" Reale Vendor Homepage: https://github.com/piluscart Software Link:...

PHPDirector Game Edition 0.1 - Local File Inclusion SQL Injection Cross-Site Scripting

PHPDirector Game Edition 0.1 - Local File Inclusion SQL Injection Cross-Site Scripting Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer...

faqmanager-sql.txt

+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...

phpMyNewsletter <= 0.8b5 (archives.php msg_id) SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Name: PHPMyNewsletter = 0.8b5 SQL Injection Credits: Charles "real" F. charlesfolathotmail.fr Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter =...

phpMyNewsletter 0.8b5 - msg_id SQL Injection

phpMyNewsletter 0.8b5 - msgid SQL Injection !/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection

!/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

PHP-Stats <= 0.1.9.1 Remote Commands Execution Exploit

No description provided by source. ?php ---phpstats0191xpl.php 04/03/2006 4.53.41 PHP-Stats = 0.1.9.1 optionadminpass overwrite / / remote commands execution exploit coded by rgod site: http://retrogod.altervista.org - works regardless of magicquotesgpc settings... usage: launch from Apache, fill...

PHP-Stats 0.1.9.1 - Remote Commans Execution

works regardless of magicquotesgpc settings... usage: launch from Apache, fill in requested fields, then go! Sun-Tzu:"Of old, the rise of the Yin dynasty was due to I Chih who had served under the Hsia. Likewise, the rise of the Chou dynasty was due to Lu Ya who had served under the Yin."...

CVE-2004-2023

SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the 1 adminname or 2 adminpass parameters...