Xerver 4.32 Source Disclosure and HTTP Authentication Bypass

Exploit for windows platform in category remote exploits ============================================================ Xerver 4.32 Source Disclosure and HTTP Authentication Bypass ============================================================ Exploit Title: Xerver Source Disclosure and HTTP Auth...

AV Arcade 3 - Cookie Authentication Bypass

AV Arcade 3 - Cookie Authentication Bypass :----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy ...

Powered by Arcs Solutions Auth Bypass Admin

Exploit for php platform in category web applications =========================================== Powered by Arcs Solutions Auth Bypass Admin =========================================== ======================================================================== | Title : Powered by Arcs Solutions Au...

AV Arcade 3 Insecure Cookie / SQL Injection

:----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...

UPlusFTP Server v1.7.1.01 HTTP Remote Buffer Overflow Post Auth

Exploit for windows platform in category remote exploits =============================================================== UPlusFTP Server v1.7.1.01 HTTP Remote Buffer Overflow Post Auth =============================================================== !/usr/bin/python import socket,sys,base64 print...

EasyFTP Server 1.7.0.11 - CWD (Authenticated) Remote Buffer Overflow

EasyFTP Server 1.7.0.11 - CWD Authenticated Remote Buffer Overflow Exploit Title: Easy FTP Server v1.7.0.11 CWD Command Remote Buffer Overflow Exploit Post Auth Date: 2010-07-18 Author: @fdiskyou e-mail: rui at deniable.org Software Link: Version: 1.7.0.11 Tested on: Windows XP SP3 en import sock...

Oracle Secure Backup Administration Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Oracle Secure Backup. The specific flaw exists within the register globals emulation layer which allows attackers to specify values for arbitrary program variables. When specific parameters are...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

/ DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command Execution Vulnerability: http://www.exploit-db.com/exploits/10261...

dotDefender 3.8-5 - Remote Code Execution (via Cross-Site Scripting)

dotDefender 3.8-5 - Remote Code Execution via Cross-Site Scripting / DotDefender = 3.8-5 No Authentication Remote Code Execution Through XSS Tested on DotDefender 3.8-5 On Ubuntu Server 9.10 64-bit with Firefox 3.6.3 Paul Hand aka rAWjAW AT offsec.com Original Post-Authentication Remote Command...

Pre Multi-Vendor SHopping Malls SQL Injection

--------------------------------------------------------------------------- +Title Multi-Vendor Shopping Malls SQL Injection Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 ---------------------------------------------------------------------------...

Bs Scripts_Directory SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...

Bs Business_Directory Script SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs BusinessDirectory Script Sqli Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL :http://www.brotherscripts.com/ Price:$24.95 Author :...

Bs Scripts_Directory - SQL Injection Authentication Bypass

Bs ScriptsDirectory - SQL Injection Authentication Bypass 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Bs ScriptsDirectory Sqli/Auth Bypass Vulnerability Date : july 5,2010 Critical Level : HIGH vendor URL...

Bs Recipes_Website Script Sql injection / Auth bypass Vulnerability

Exploit for php platform in category web applications =================================================================== Bs RecipesWebsite Script Sql injection / Auth bypass Vulnerability ===================================================================...

Bs Scripts_Directory Sql injection / Auth bypass Vulnerability

Exploit for php platform in category web applications ============================================================== Bs ScriptsDirectory Sql injection / Auth bypass Vulnerability ==============================================================...

KLA10331 SB vulnerability in Snare

A CSRF vulnerability was found in Snare. By exploiting this vulnerability malicious users can hijack administrator auth. This vulnerability can be exploited remotely. Original advisories - Related products Snare-for-Windows Epilog-for-Windows CVE list CVE-2010-2594 high Solution Update to latest...

Placeto CMS SQL Injection

Exploit Title : Placeto CMS Auth. Bypass Vulnerability Date : 15 - 5 - 2010 Author : S.W.T Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Go To The Admin Panel , And Enter The Following Username = or'1'='1' Password = S.W.T This Is Security War Team Penetration Testing & Ethical...

i-net MLM Script Engine SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== i-net MLM Script Engine SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

I-Net MLM Script Engine - SQL Injection

I-Net MLM Script Engine - SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi special thanks to ...

hcms auth bypass / multiple vulnerability

Exploit for php platform in category web applications ========================================= hcms auth bypass / multiple vulnerability ========================================= Exploit Title: hcms auth bypass and multiple xss/code injection vulnerability Date: 23/06/2010 Author: DiGiTaL Softwa...