lansuite-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl lansuite success $stats = new stats; // Boxes if !$IsAboutToInstall and !$GET'contentonly' and $GET'design' != 'base'...

CVE-2008-4176

SQL injection vulnerability in izle.asp in FoT Video scripti 1.1 beta allows remote attackers to execute arbitrary SQL commands via the oyun parameter...

CVE-2008-4145

SQL injection vulnerability in userreadlinks.php in Addalink 1.0 beta 4 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

addalink-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DESC LIMIT $start,$steps"; 33:...

addalink 4 - category_id SQL Injection

addalink 4 - categoryid SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Add a link D.O.M Labs - Security Researchers - www.domlabs.org Vuln Code: -------------- 32: $readoutlinktable="SELECT FROM $linktable WHERE approved='1' AND categoryid='$categoryid' ORDER BY id DE...

addalink 4 Beta - Write Approved Links

addalink 4 Beta - Write Approved Links -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= addalink eNYe-Sec - www.enye-sec.org Linklist is a miniwebsite that you can use in your webpage. Basically it manages a database of links using PHP+MySQL. Users can send...

Google Chrome Browser 0.2.149.27 Automatic File Download Exploit

No description provided by source. Author: nerex E-mail: nerexatlivedotcom Google's new Web browser Chrome allows files e.g., executables to be automatically downloaded to the user's computer without any user prompt. This proof-of-concept was created for educational purposes only. Use the code it...

FreeBSD Ports: openssl, openssl-beta

The remote host is missing an update to the system as announced in the referenced advisory. VID 68233cba-7774-11d8-89ed-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: krb5, krb5-beta

The remote host is missing an update to the system as announced in the referenced advisory. VID 0bb7677d-52f3-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: openssl, openssl-beta

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: krb5, krb5-beta

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: openssl, openssl-overwrite-base

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability

No description provided by source. YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 28.08.08 Product: YourOwnBux Version: 3.1, 3.2 Price: $39.99 DEMO: yourownbux.com/demos/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off 3.2 Beta version...

YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability =========================================================== YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability...

YourOwnBux 3.1 3.2 Beta Remote SQL Injection Vulnerability

No description provided by source. YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 28.08.08 Product: YourOwnBux Version: 3.1, 3.2 Price: $39.99 DEMO: yourownbux.com/demos/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off 3.2 Beta version...

NoName Script <= 1.1 Multiple Remote Vulnerabilities

No description provided by source. + NoName Script 1.1 BETA Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Local File Inclusion...

OneNews Beta 2 Multiple Vulnerabilities

/////////////// Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1. XSS and html...

onenews Beta 2 - Cross-Site Scripting HTML Injection SQL Injection

onenews Beta 2 - Cross-Site Scripting HTML Injection SQL Injection ///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz :...

onenews Beta 2 - Cross-Site Scripting / HTML Injection / SQL Injection

///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1...

Version-independent IOS shellcode

Hi, One of the biggest problems with IOS exploitation is that on every different version of IOS, the addresses required to execute useful shellcode are different. Therefore, hard-coded addresses were inserted into shellcode and this made exploits very version-dependent. I have been working on a w...