3604 matches found
Schoolhos CMS Beta 2.29 (index.php, id parameter) SQL Injection
No description provided by source. Exploit Title: Schoolhos CMS SQL Injetions Google Dork: intext:Schoolhos Free Open Source CMS Date: 22 Oktober 2012 Exploit Author: Cumi++ Vendor Homepage: http://schoolhos.com/ Version: Beta 2.29 Tested on: Ubuntu 12.04...
Upload-Point 1.6 Beta - Upload Shell Vulnerability
No description provided by source. ======================================================================================== $ | Title : Upload-Point 1.6 Beta pload Shell Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Alger...
NewsTraXor Website Management Script 2.9 beta Database Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10194/info Reportedly NewsTraXor is affected by a remote database disclosure vulnerability. This issue is due to a design error that allows the database file to be globally readable. This issue may allow a remote attacker...
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Plogger = Beta 2.1 SQL injection / administrative credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n\r\n; echo...
phpCC <= 4.2 beta (nickpage.php npid) Remote SQL Injection Exploit
No description provided by source...
Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability
No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...
Pagesetter 6.2/6.3.0 index.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22733/info Pagesetter is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
Sonique2 2.0 Beta Build 103 - Local Crash PoC
No description provided by source. !/usr/bin/python Title: Sonique2 2.0 Beta Build 103 Local Crash PoC Found by: b0telh0 Tested on: Windows XP SP3 crash = \x41 20000 try: file = open'b0t.pls','w'; file.writecrash; file.close; print + Created b0t.pls file. except: print - Error cant write file to...
vBulletin 5.0.0 Beta 11 - 5.0.0 Beta 28 - SQL Injection
No description provided by source. Exploit Title: vBulletin 5 Beta XX SQLi 0day Google Dork: Powered by vBulletin? Version 5.0.0 Beta Date: 24/03/2013 Exploit Author: Orestis Kourides Vendor Homepage: www.vbulletin.com Software Link: Version: 5.0.0 Beta 11 - 5.0.0 Beta 28 Tested on: Linux CVE :...
Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC
No description provided by source. !-- + Title: Exponent CMS 2.0 Beta 1.1 CSRF Add Administrator Account PoC + Version: 2.0 Beta 1.1 not tested with older versions + Note: No need administrator to be logged : + Tested on: Linux Ubuntu 11.04 Google Chrome but will work in any other OS + Download...
Viennabux Beta! 'cat' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39602/info Viennabux Beta! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromi...
Bloggeruniverse 2.0 Beta - (editcomments.php id) SQL Injection Exploit
No description provided by source...
Thwboard Beta 2.8 calendar.php year Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...
paBugs <= 2.0 Beta 3 (class.mysql.php) Remote File Include Exploit
No description provided by source. ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+...
DCShop Beta 1.0 Form Manipulation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4356/info DCShop Beta is a freely available shopping cart system, written in Perl. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is possible to overwrite setup files .setu...
Affiliate Market 0.1 BETA - XSS / SQL Injection Exploit
No description provided by source. !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
PHP Ticket System Beta 1 (get_all_created_by_user.php, id param) - SQL Injection
No description provided by source. ============================================================== Title ...| PHP Ticket System SQL Injection Version .| BETA1.zip Date ....| 27.02.2014 Found ...| HauntIT Blog Home ....| http://sourceforge.net/projects/phpticketsystem/...
Thwboard Beta 2.8 v_profile.php user Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of...
Paul Smith Computer Services VCAP Calendar Server 1.9 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19959/info vCAP Calendar Server is prone to a remote denial-of-service vulnerability. This issue is due to a design error. An attacker can exploit this issue to crash the application, effectively denying service. vCAP...
Nuked-Klan 1.3 - Remote Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6917/info A vulnerability has been discovered in Nuked-Klan which may be exploited to execute certain PHP functions on a target server. This issue occurs in the 'Team', 'News', and 'Lien' modules and is due to insufficien...