5962 matches found
GMER 1.0.15.15641 MFT Overwrite
Exploit for windows platform in category dos / poc include include include include include / Program : GMER 1.0.15.15641 Homepage : http://www.gmer.net Discovery : 2011/08/01 Author Contacted : 2011/08/09 Status of vuln : 0day Found by : Heurs This Advisory : Heurs Contact : email protected //---...
WordPress Filedownload 0.1 File Disclosure
Exploit Title: WordPress Filedownload Plugin 0.1 download.php Remote File Disclosure Vulnerability Google Dork: inurl:"/wp-content/plugins/filedownload/download.php/?path" Date: 18-09-2011 Author: Septemb0x CYBER-WARRIOR Software Link:...
PHP Support Tickets v2.2 Code Exec
Exploit for php platform in category web applications Exploit Title: PHP Support Tickets v2.2 Code Exec Google Dork: "PHP Support Tickets v2.2" Date: 26.09.2010 Author: brainpillow Software Link: http://www.phpsupporttickets.com/ Version: 2.2...
NetCat CMS Multiple Vulnerabilities
NetCat CMS version 5.0.1 suffers from cross site scripting and HTTP parameter pollution vulnerabilities. Exploit Title: NetCat CMS Code exec, SQL-injection Google Dork: none Date: 28.11.2010 Author: brainpillow Software Link: http://netcat.ru/ Version: UNKNOWN On different versions of this softwa...
IZotope Rx Advanced Local Buffer Overflow
Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:IZotope Rx Advanced Local Buffer Overflow Author: Angel Injection Thanks: r0073r // Sid3^effects // r4dc0re // CrosS || Inj3ct0r Team || "SeeMe" // XroGuE // gunslinger // indoushka // KnocKout // ZoRLu //...
WordPress Paid Downloads 2.01 SQL Injection
Exploit Title: WordPress Paid Downloads plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $downloadkey = $GET"downloadkey"; $sql = "SELECT FROM ".$wpdb-prefix."pddownloadlinks WHERE downloadkey = '".$downloadkey."'"; $linkdetails =...
SA-CONTRIB-2011-040 Author Pane access bypass
The Author Pane module provides information about users on a site. This module has integration with several other modules including the user locations of the Location module. If you enabled display of user locations the Author Pane module may have shown user locations to site visitors who did not...
WordPress KNR Author List Widget 2.0.0 SQL Injection
Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET knrauthororder = $position WHERE ID = $item";...
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection
Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET knrauthororder = $position WHERE ID = $item";...
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection
WordPress Plugin KNR Author List Widget 2.0.0 - SQL Injection Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...
WordPress KNR Author List Widget Plugin <= 2.0.0 - SQL Injection
KNR Author List Widget plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress KNR Author List Widget plugin <= 2.0.0 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress KNR Author List Widget plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- foreach $GET'listItem' as $position = $item : $iterSql = "UPDATE $wpdb-users SET...
WordPress Plugin Couponer 1.2 - SQL Injection
Exploit Title: WordPress Couponer plugin = 1.2 SQL Injection Vulnerability Date: 2011-08-31 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/couponer.zip Version: 1.2 tested Note: magicquotes has to be turned off --- PoC ---...
yahoo! player 1.5 (.m3u) Universal Buffer Overflow (SEH)
No description provided by source. !/usr/bin/perl Exploit Title: yahoo! player 1.5 .m3u Universal Buffer Overflow SEH Date: 27/08/2011 Author: D3r K0n!G Software Link: http://www.clubic.com/lancer-le-telechargement-8059-0-yahoo-player.html Version: 1.5.01.409 Tested on: Windows XP SP3 CVE : N/A...
WordPress oQey Headers 0.3 SQL Injection
Exploit Title: WordPress oQey Headers plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- ifisset$GET'imgheaderid'//order images foreach $GET'imgheaderid' as $position = $item $hupdate = sprintf"UPDATE $oqeyheader SET oqeyhorder = '%d'...
WordPress Photoracer plugin <= 1.0 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Photoracer plugin = 1.0 SQL Injection Vulnerability Google Dork: inurl:"wp-content/plugins/photoracer/viewimg.php" Date: 2011-08-26 Author: evilsocket evilsocket at gmail dot com Software Link:...
Buchanan Solutions SQL Injection
+------------------------------------------------------------------------------------------+ |------------------------ B-Solutions SQL Injection Vulnerability -----------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...
Free MP3 CD Ripper 1.1 Local Buffer Overflow
Exploit for windows platform in category local exploits Exploit Title : Free MP3 CD Ripper 1.1 Local Buffer Overflow Software : http://www.brothersoft.com/free-mp3-cd-ripper-84543.html Version : 1.1 Tested on : Windows xp sp3 en Date : 27/08/2011 Author : X-h4ck Website : http://www.pirate.al ,...
WordPress SendIt plugin <= 1.5.9 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: WordPress SendIt plugin getvar"SELECT COUNT FROM $tableemail where email ='$POSTemailadd' and idlista = '$POSTlista';"; As you can see, $POSTlista parameter is nor validated neither escaped, so you can blind sql inject it using...
Logical Web Publisher SQL Injection
+------------------------------------------------------------------------------------------+ |------------------- Logical Web Publisher SQL Injection Vulnerability ------------------| +------------------------------------------------------------------------------------------+ + Google Dork :...