Games Script (Galore) Backup Dump Vulnerability

Exploit for php platform in category web applications =============================================== Games Script Galore Backup Dump Vulnerability =============================================== ======================================================================================== | Title :...

GameScript 3.0 - SQL Injection

Author : FormatXformat Home : Tkurd.net Script : http://www.gamescript.net Vulnerabilities : SQL Injection Dork: Copyright © 2005 - 2006 GameScript.net. All Games Copyright © To Their Respective Owners. All Rights Reserved. Exploit:...

vBulletin adminCP Cross-Site Scripting

No description provided by source. .::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE...

vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...

Uploadscript 1.0 Disclosure / Shell Upload

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities =======================================================...

Uploadscript 1.0 - Multiple Vulnerabilities

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Chipmunk Board Script 1.x - Multiple Cross-Site Request Forgery Vulnerabilities

------------------------------------------------------------------------------------------------- Title: Chipmunk Board Script 1.x Multiple XSRF Vulnerabilities Author: Milos Zivanovic Email: milosz.securityatgmail.com Date: 11. December 2009...

Uploadscript v1.0. Multiple Vulnerabilities

Exploit for unknown platform in category web applications =========================================== Uploadscript v1.0. Multiple Vulnerabilities =========================================== How to use it ? ----------------- Go to : http://site/path/password.txt You will find a Hashmd5 password !...

Discuz! Underworld career plugin injection vulnerability-vulnerability warning-the black bar safety net

Plugin version: 2.2 2.5 Register a forum ID IE submit the following code blackband. php? mode=yule&action=enjoy&id=2 and 1=2 union select 1,0x2D312C67726F757069643D312C61646d696e69643d31,3,4/ Promoted to administrator discuz7. 0. 0 background to give webshell method If it is discuz6. 0 the...

Nwahy Dir 2.1 Change Admin Password

......................"; else /code - Works On : 1. Nwahy Articles v1 2. Nwahy scripts v1 3. Nwahy book v1 - Note : Path to Control Panel "/admincp/" . / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function Usage print "\n\n"; print...

MyEgy Script SQL Injection

MyEgy Explo!t ..style1 text-align: center; function doitsi,co forvar n =1;n My Egy Explo!t By : Karar alShaMi & Sheko Victim: input name="site" type="text" style="width: 253px" value="...

Mlffat 2.1 (Auth Bypass / Cookie) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Mlffat 2.1 Auth Bypass / Cookie SQL Injection Vulnerability ============================================================= MLFFAT 2.1 - insecure Cookie Handling Buy:...

Cross site scripting

Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...

CVE-2009-0862

Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...

CVE-2009-0862

TangoCMS (admincp) is affected by a cross-site scripting (XSS) vulnerability in hook_cntrlr_error_output() inside modules/page/hooks/listeners.php, affecting TangoCMS 2.2.x prior to 2.2.4. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. OpenVAS re...

CVE-2009-0862: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the hookcntrlrerroroutput function in modules/page/hooks/listeners.php in the admincp component in TangoCMS 2.2.x aka Eagle before 2.2.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details ar...

CVE-2008-6256

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...

Sql injection

Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 answer parameter to admincp/verify.php, 2 extension parameter in an edit action to admincp/attachmentpermission.php, and the 3 iperm parameter to...

CVE-2008-6256: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinforecurring parameter, a different vector than CVE-2005-3022...