14 matches found
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype=multipart/form-data Existing User:INPUT name=unamebr INPUT type=file name=userfile style=visibility:HIDDENbr INPUT type=hidden name=email [email protected] input type=hidden...
40 vulnerabilities in SMF 1.1.10/SMF 2.0RC2 by elhacker.net (Simple Audit)
This is the first batch of vulnerabilities found by the SimpleAudit team from elhacker.net http://labs.elhacker.net/simpleaudit Our goal is to evaluate the security of SMF 2.0 before using it on our own server, and we have found several security vulnerabilities. The vulnerabilities that also appl...
PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting
Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...
PHP-Revista 1.1.2 (RFI/SQLi/CB/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== PHP-Revista 1.1.2 RFI/SQLi/CB/XSS Multiple Remote Vulnerabilities =================================================================== Discovered by Sirdarckcat from...
[Full-disclosure] ssLinks v1.22 Multiple SQL Injection Vulnerabilities
Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ ssLinks v1.22 Multiple SQL Injection Vulnerabilities http://scripts.incutio.com/sslinks/...
[Full-disclosure] Autentificator v2.01 SQL Injection Vulnerabilty
Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ Autentificator v2.01 SQL Injection http://www.hotscripts.com/Detailed/15291.html ------------------------------------------------------------------------------------...
ajaxchat.txt
Discovered by Sirdarckcat from elhacker.net Ajax Chat http://www.pcdiscs.co.uk/chat/ ============================================== Ajax Chat is a web script for making an online chat based on PHP and AJAX. This has a Remote File Disclosure and a XSS bug...
sqlitewebadmin.txt
Discovered by Sirdarckcat from elhacker.net SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin ============================================== SQLiteWebAdmin is a simple script for managing a DataBase. It has several security bugs. ============================================== Remote...
xprotection110.txt
Discovered by Sirdarckcat from elhacker.net X-Protection 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Protection is a simple script made for protectiong files with a simple file inclusion. There is a SQL injection vulnerability...
xstatics120.txt
Discovered by Sirdarckcat from elhacker.net X-Statics 1.20 http://members.lycos.co.uk/xscripts03/ ============================================== X-Statics is a simple script for making statics of a web site. There is an SQL injection vulnerability ============================================== PO...
[Full-disclosure] SQLiteWebAdmin multiple Vulnerabilities
Discovered by Sirdarckcat from elhacker.net SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin ============================================== SQLiteWebAdmin is a simple script for managing a DataBase. It has several security bugs. ============================================== Remote...
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
TinyPHP Forum 3.6 - 'makeAdmin' Remote Admin Maker
TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
90% of programs made in PHP5 and prior Full Path Disclosure vuln.
:Introduction: Normally one of the last steps when accessing to a web-server is to find the url where the web is installed more common in RFD. This may be a hard step, if the RPD is the only bug in that server, but PHP programs have functions that unexpectedly can return lots of errors. ATTENTION...