Symev CMS SQL Injection

Symev cms...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

Joomla! Component com_acteammember - SQL Injection

Joomla Component comacteammember Sql Injection Vulnerability ============================================================== .:. Author : altbta [email protected] .:. Home : www.v4-team.com/cc .:. Dork : inurl:"comacteammember" === Exploit ===...

Extreme Mobster Free.Licente Cross Site Scripting

======================================================================================== | Title : Extreme Mobster Free.Licente Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Si...

vBulletin v 4.0.1 XSS Vulnerability

Exploit for unknown platform in category web applications =================================== vBulletin v 4.0.1 XSS Vulnerability =================================== + Script: vBulletin Version 4.0.1 + Vendor: www.vbulletin.com + Author: W4n73d Bug: Cross Site Scripting XSS Exploit:...

File Upload Manager 1.3 Shell Upload

Exploit Title: File Upload Manager v1.3 exploit Date: 14/2/2010 Author: ROOTEGY Software Link: Version: v1.3 Tested on: CVE : Code : ============================================================ www.sec-war.com ============================================================ 1- upload shell with:...

StatCounteX 3.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== StatCounteX 3.1 Multiple Vulnerabilities ======================================== Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Author: Phenom Software Link:...

RadASM 2.2.1.6 - .rap Local Buffer Overflow (PoC)

RadASM 2.2.1.6 - .rap Local Buffer Overflow PoC /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / include void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char;...

Trade Manager Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

UltraISO 9.3.6.2750 - Local Buffer Overflow (PoC)

/ccd overflow string=10974 bytes img file size=109974 bytes ccd file size=11812 / include include include void printchar; unsigned int getFsizeFILE,char; void genrandomchar,const int; void exploitchar,char; define IM "testf.img" define CC "testf.ccd" define VER "9.3.6.2750" define POCNAME "Ultrai...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1 Remote Denial of Service

No description provided by source. !-- Safari 4.0.4 Remote Denial of Service With Possible Memory Corruption With OOM Firefox 3.5.6 Safari 4.0.4 SeaMonkey 2.0.1 Author : 599eme Man Contact : [email protected] -- body onload="javascript:DoS;"/body script function DoS var buffer = 'A'; for i =0;i150;i+...

FoxPlayer 1.7.0 - '.m3u' Local Buffer Overflow

!/usr/bin/perl print qq FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit Credit : opt!x hacker http://milw0rm.com/exploits/9393 Author : cr4wl3r Greetz : str0ke, opt!x hacker, xoron all member at manadocoding.net all member at indonesianhacker.org ; my $junk = "\x41" x 260; my $eip =...

PHP Car Rental-Script - Authentication Bypass

PHP Car Rental-Script - Authentication Bypass / Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.com ... / - Log-On page :...

PHP Car Rental-Script - Authentication Bypass

/ Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.com ... / - Log-On page : http://server/PATH/index.php?pluginid=4 username = ' or '1=1/...

Evernew Free Joke Script SQL Injection

/ Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite : www.evernewscripts.com Download : http://www.evernewscripts.com/free-php-scripts/jokescript1.2.zip Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , int0x80 , geeksec.com ... a loot / VULN CODE -- viewjokes.p...

Crownweb SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...

phpBB 2.0.1 Cross Site Scripting

phpBB 2.0.1 Download: http://www.phpbb.com/downloads Vendor: www.phpbb.com Author: s4r4d0 mail: [email protected] Bug: Cross site scripting has benn found on viewtopic.zsp file. Exploit: http://host/bb/viewtopic.zsp?t=Xss Demo: http://www.recipezaar.com/bb/viewtopic.zsp?t="XSS By Fatal Error Made ...

PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)

/\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack ------------------------------------------------------------------------------------------ EOF...

SA-CONTRIB-2010-010 - Author Contact - Cross site scripting

The Author Contact module provides a form to contact the author of the current post. The module does not properly sanitize parts of the provided block, leading to a cross-site scripting XSS vulnerability. Such an attack may lead to a malicious user gaining full administrative access. A user must...