PHPCOIN 1.2.1 - mod.php Local File Inclusion

PHPCOIN 1.2.1 - mod.php Local File Inclusion Exploit Title: phpCOIN 1.2.1 mod.php LFI vulnerability Author: mlk Software Link: null Version: phpCOIN 1.2.1 Tested on: Linux,BSD and windows Code : on paper phpCOIN 1.2.1 mod.php Local File Inclusion Vulnerability + Discovered by : mlk + Teams :...

ldap-search NSE Script

Attempts to perform an LDAP search and returns all matches. If no username and password is supplied to the script the Nmap registry is consulted. If the ldap-brute script has been selected and it found a valid account, this account will be used. If not anonymous bind will be used as a last attemp...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to...

Izumi 1.1.0 - Multiple Local File Inclusion Remote File Inclusions

Izumi 1.1.0 - Multiple Local File Inclusion Remote File Inclusions + Izumi + Download : http://sourceforge.net/projects/izumi/files/ + Code : page.php requireonce$dirinstall . $dirsrc . "common.php"; + Example : x RFI : Izumipath/src/page.php?dirinstall=Shell x LFI :...

Rostermain 1.1 - Authentication Bypass

Rostermain 1.1 - Authentication Bypass + Rostermain + Download : http://scripts.ringsworld.com/games-and-entertainment/rostermain/ + Vuln Code : index.php if $POST'userid' && $POST'password' // if the user has just tried to log in $logquery = "select from users " ."where username='$userid' " ." a...

RealAdmin suffers from a remote blind SQL injection vulnerability

No description provided by source. .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script: http://www.redcow.ca/products/realadmin/ .:. Bug Type : Blind Sql Injection .:. Dork : "Powered by RealAdmin and Red...

RealAdmin Blind SQL Injection

RealAdmin detail.php Blind Sql Injection Vulnerability ======================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : RealAdmin .:. Download Script: http://www.redcow.ca/products/realadmin...

myBusinessAdmin - 'content.php' Blind SQL Injection

myBusinessAdmin content.php Blind Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : myBusinessAdmin .:. Download Script:...

Shout! CMS SQL Injection

Shout! content.php Blind Sql Injection Vulnerability ======================================================= .:. Author : Zero Cold [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Shout! Script .:. Donwload Script: http://www.mediashaker.com/index.php .:...

http-methods NSE Script

Finds out what options are supported by an HTTP server by sending an OPTIONS request. Lists potentially risky methods. It tests those methods not mentioned in the OPTIONS headers individually and sees if they are implemented. Any output other than 501/405 suggests that the method is if not in the...

Joomla Simple FAQ Blind SQL Injection

Joomla Component comsimplefaq catid Blind Sql Injection Vulnerability ========================================================================= .:. Author : AtT4CKxT3rR0r1ST .:. Team : Sec Attack Team .:. Email : [email protected] .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component...

ThinkAdmin SQL Injection

ThinkAdmin page.php Sql Injection Vulnerability ========================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : ThinkAdmin .:. Script Download: http://www.thinkadmin.net/ .:...

Novatel Wireless MiFi 2352 - Password Information Disclosure

source: https://www.securityfocus.com/bid/37962/info MiFi 2352 is prone to an information-disclosure vulnerability that may expose sensitive information. Successful exploits will allow authenticated attackers to obtain passwords, which may aid in further attacks. MiFi 2352 access point firmware...

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS (Windows)

IT-Grundschutz M4.186: Entfernen von Beispieldateien und Administrations-Scripts des IIS Windows ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde zudem in neueren EL gestrichen. Diese Prüfung bezieht sich auf die 10. Ergänzungslieferung 10. EL des IT- Grundschutz. Die detaillierte...

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection

Yaws 1.55 - Logs Terminal Escape Sequence Command Injection source: https://www.securityfocus.com/bid/37716/info Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary comman...

phpMDJ 1.0.3 - SQL Injection

,--------------------------------------------------------------, Vulnerable Script : phpMDJ 1.0.3 \ Download : http://www.weboac.be/phpmdj/docs/phpmdj1.0.3.zip \ Vulnerability : Remote Sql Injection \ '--------------------------------------------------------------'...

DS CMS 1.0 - 'NewsId' SQL Injection

Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit +++++++++++++++++++++++...

DieselPay 1.6 - Cross-Site Scripting / Directory Traversal

source: https://www.securityfocus.com/bid/37564/info DieselPay is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these vulnerabilities to obtain sensitive information,...

Webring - Cross-Site Scripting

Webring - Cross-Site Scripting ======================================================================================== | Title : webring Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Quiz - Cross-Site Scripting

======================================================================================== | Title : quiz Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : 10679 | |...