classsystem-multi.txt

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Class System v2.3 Multiple Remote...

Class System v2.3 Multiple Remote Vulnerabilities

/ | || | | | | | | | | /| | | | | || ||| ||||| || C. H. R. O. O. T. SECURITY GROUP - -- ----- --- -- -- ---- --- -- - http://www.chroot.org Hacks In Taiwan | || | | | | | | | Conference 2008 | | | | | | | | | || ||| || |||| http://www.hitcon.org Title :: Class System v2.3 Multiple Remote...

EntertainmentScript 1.4.0 (page.php page) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl EntertainmentScript V1.4.0 page.php page Local File Inclusion Exploit Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : P0c :...

AlkalinePHP 0.80.00 Beta - 'thread.php' SQL Injection

!/usr/bin/perl -w Portal : AlkalinePHP see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & All muslims HaCkeRs : ---------------------------------------------------------------------------- TITLE: PerlSploit Class REQUIREMENTS: PHP 4 / PHP 5 VERSION: v.1 LICENSE: GNU General Public License...

archangelweblog-sql.txt

!/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All...

Archangel Weblog 0.90.02 (post_id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix &...

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

!/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40 Contact: Ev!L Gree...

Advanced Image Hosting (AIH) 2.1 - SQL Injection

Advanced Image Hosting AIH 2.1 - SQL Injection !/usr/bin/perl -w Advanced Image Host Script Powered by: AIH = v2.1 - Remote SQL Inj Exploit dork:Powered by: AIH v2.1 exploit aported password not crypted exploit tatjibe password mdecrypté :d mgharba :d:d:d:d Founded by : Stack-Terrorist v40...

joomlavisites-rfi.txt

/===============================================================================================================================================\ | | | o Joomla Visites 1.1 RC2 Remote File Inclusion Vulnerability | | | | Software : comjoomla-visites version 1.1 RC2 | | Vendor :...

Joomla! Component Joomla-Visites 1.1 RC2 - Remote File Inclusion

/===============================================================================================================================================\ | | | o Joomla Visites 1.1 RC2 Remote File Inclusion Vulnerability | | | | Software : comjoomla-visites version 1.1 RC2 | | Vendor :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 class parameter to a methodTable.php, b code.php, and c details.php in browser/; and the 2 location parameter to browser/code.php. NOTE: the provenance of this...

Zune Software - ActiveX Arbitrary File Overwrite

Zune Software - ActiveX Arbitrary File Overwrite Vulnerability class : Arbitrary file overwrite Discovery date : 21 April 2008 Remote : Yes Credits : J. Bachmann & B. Mariani from ilion Research Labs Vulnerable : Zune software: EncProfile2 Class An arbitrary file overwrite as been discovered in a...

CVE-2008-1917: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 class parameter to a methodTable.php, b code.php, and c details.php in browser/; and the 2 location parameter to browser/code.php. NOTE: the provenance of this...

HostDirectory Pro Insecure Cookie Handling Vulnerability

No description provided by source. $ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo.........:...

HostDirectory Pro - Insecure Cookie Handling

HostDirectory Pro - Insecure Cookie Handling $ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo............

HostDirectory Pro - Insecure Cookie Handling

$ Script.......: HostDirectory Pro $ Download.....: http://www.mediafire.com/?71nvkj199n7 null Real Price :Price single license : $79.95 USD $ Author.......: CrackersChild | [email protected] $ Class........: Insecure Cookie Handling $ Demo.........:...

Flash plugin DNS rebinding

The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash SWF movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML...

CVE-2008-1617

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 iManFile.cab, as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null...