SilverNews 2.04 Bypass / LFI / Code Execution

0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code // Get the user informatio...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= ZeroBoard4 pl8 07.12.17 Multiple Remote Vulnerabilities ========================================================= / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

No description provided by source. Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user user='openfiler' What pass do you...

GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability

Exploit for unknown platform in category web applications ==================================================================== GR Note 0.94 beta Auth Bypass Remote Database Backup Vulnerability ==================================================================== GR Note v0.94 beta Remote Database...

4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname...

DMXReady online notebookmanager 1.1 Auth Bypass Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = DMXReady online notebookmanager v1.1 Bypass SQL Injection Vuln. = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

GR Note 0.94 beta (Auth Bypass) Remote Database Backup Vulnerability

No description provided by source. GR Note v0.94 beta Remote Database Disclosure Vulnerability Author: Jose Luis Gongora Fernandez a.k.a JosS sys-projectathotmail.com Web: http://hack0wn.com/ // TEST ON VERSION GR Note v0.94 beta, in my localhost Download :...

MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ MyDesing Sayac 2.0 Auth Bypass SQL Injection Vulnerability ============================================================ Script :MyDesing Sayac v2.0 Site...

ClickCart 6.0 (Auth Bypass) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== ClickCart 6.0 Auth Bypass Remote SQL Injection Vulnerability ============================================================== Tybe:Auth Bypass Remote SQL Injection Vulnerability...

Online Grades 3.2.4 SQL Injection

0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname'; $pword = $POST'pass'; $mysqlquer...

4Site CMS 2.6 - Multiple SQL Injections

4Site CMS 2.6 - Multiple SQL Injections WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

4Site CMS 2.6 SQL Injection

WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

Exploit for unknown platform in category web applications ========================================================== Openfiler 2.3 Auth Bypass Remote Password Change Exploit ========================================================== Exploit code PoC for OpenFiler 2.3 current by just a nonroot use...

MyDesing Sayac 2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ---- BY KACAK FROM TERRORÄ°ST CREW ---- Author : Kacak Team : Terrorist Crew / Peace Crew Contact : [email protected] Hava Serin Mevzu Derin :D Script :MyDesing Sayac v2.0 Site :http://www.mydesign.gen.tr/myforum/forumposts.asp?TID=90 Download...

Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Online Grades 3.2.4 Auth Bypass SQL Injection Vulnerability ============================================================= 0x01 Informations: Script : Online Grades 3.2.4 Downloa...

WholeHogSoftware Password Protect (Auth Bypass) SQL Injection Vuln

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Password Protect Site :http://wholehogsoftware.com Price :$20.00 Detay :http://www.wholehogsoftware.com/index.php/page/passwordprotectenhanced .... Admin Path...

WinFTP 2.3.0 (LIST) Remote Buffer Overflow Exploit (post-auth)

No description provided by source. !/usr/bin/perl WinFTP 2.3.0 post-auth remote exploit. www.wftpserver.com root@halcyon:/Exploits/WinFTP perl winftp-remote.pl Usage: winftp-remote.pl host username password target Target: 1 - Win2k Target: 2 - WinXP sp2/3 DoS only root@halcyon:/Exploits/WinFTP pe...

WholeHogSoftware Ware Support (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== WholeHogSoftware Ware Support Auth Bypass SQL Injection Vuln ============================================================== Script :Ware Support Site :http://wholehogsoftware.c...

WholeHogSoftware Password Protect (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================== WholeHogSoftware Password Protect Auth Bypass SQL Injection Vuln ================================================================== Script :Password Protect Site...