All Club CMS <= 0.0.2 index.php Remote SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS = 0.0.1f index.php Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x D.O.M TEAM 2008 we are: ka0x, an0de,...

Rianxosencabos CMS 0.9 - Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

maplab ms4w 2.2.1 - Remote File Inclusion Vulnerability

No description provided by source. Bug Found By ka0x D.O.M TEAM we are: anonyph;arp;ka0x;xarnuz Contact: [email protected] FROM SPAIN --- Script: MapLab Version: 2.2.1 Official Site: http://www.maptools.org Download: http://www.maptools.org/dl/ms4w/maplabms4w-2.2.1.zip -- Bug File: params.php Path...

BLOG 1.55B File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

FreeLyrics 1.0 File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

MyPHPsite Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

BLOG 1.55B (image_upload.php) Arbitrary File Upload Vulnerability

No description provided by source. Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are...

FreeLyrics 1.0 (source.php p) Remote File Disclosure Vulnerability

No description provided by source. Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

BLOG 1.55B - &#039;image_upload.php&#039; Arbitrary File Upload

Piker BLOG v1.55B Arbitrary File Upload Vulnerability Affected software: BLOG v1.55B prior versions can be affected Vendor: http://sourceforge.net/projects/kafooeyblog/ Risk: High http://target/path/lib/imageupload.php This script only checks if the file you are uploading is not a text/plain file...

MyPHPsite (index.php mod) Local File Inclusion Vulnerability

No description provided by source. Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker...

MyPBS - seasonID SQL Injection

MyPBS - seasonID SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers MyPBS Remote SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl mypbs.pl http://localhost/mypbs...

FreeLyrics 1.0 - Remote File Disclosure

FreeLyrics 1.0 - Remote File Disclosure Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker...

FreeLyrics 1.0 - Remote File Disclosure

Piker FreeLyrics Remote Source Code Disclosure Vulnerability Affected software: FreeLyrics Vendor: http://lyrics.sourceforge.net/ Risk: Medium http://target/path/source.php?p=FILE PoC: http://target/path/source.php?p=config.php Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security Researche...

MyPHPsite - Local File Inclusion

Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotcom D.O.M Labs - Security...

MyPHPsite - Local File Inclusion

MyPHPsite - Local File Inclusion Piker MyPHPSite Local File Inclusion Vulnerability Affected software: MyPHPSite Vendor: www.myphpsite.org Risk: Medium http://target/path/index.php?mod=LFI%00 PoC: http://target/path/index.php?mod=../../../../../../etc/passwd%00 Found by Piker piker0x90atgmaildotc...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x ka0x01alt+64gmail.com D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid';...

FLDS 1.2a - report.php SQL Injection

FLDS 1.2a - report.php SQL Injection !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo =...

geccBBlite 2.0 - &#039;id&#039; SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers geccBBlite Forums SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl geccBB.pl http://localhost/geccBB /etc/passwd + Prefix:...

geccBBlite 2.0 - id SQL Injection

geccBBlite 2.0 - id SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers geccBBlite Forums SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl geccBB.pl...

Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...