pnflash-sql.txt

============================================================ PostNuke pnFlashGames Module v1.5 REmote SQL Injection ============================================================ Bulan: xoron xoron.biz + Love's the funeral of hearts The funeral of hearts And a plea for mercy When love is a gun...

PHPBandManager 0.8 - 'index.php?pg' Remote File Inclusion

author:koray greetz:cigicigi.net script:http://sourceforge.net/projects/phpbandmanager allowurlfopen:on or registerglobals:on vuln; /bandmanager/suite/index.php include$GET'pg'.".php"; example; http://www.victim.com/suite/index.php?pg=shell link? milw0rm.com 2007-04-26...

PHP Turbulence Turbulence.PHP远程文件包含漏洞

PHP Turbulence是一款基于PHP的WEB应用程序。 PHP Turbulence不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Turbulence.PHP'脚本对用户提交的'GLOBALStcore'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PHP Turbulence 0.0.1 alpha 目前没有解决方案提供： http://turbulence.sourceforge.net/...

SunShop Shopping Cart 3.5/4.0 (abs_path) RFI Vulnerabilities

No description provided by source. sunshop 4 index.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : SunShop v3.5/4.0 Discovered By : irvian scripts site : http://www.turnkeywebtools.com/sunshop/ Thanks To :...

RicarGBooK 1.2.1 (header.php lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== RicarGBooK 1.2.1 header.php lang Local File Inclusion Vulnerability =====================================================================...

RicarGBooK 1.2.1 - 'lang' Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=- RicarGBooK 1.2.1 -=-=-=-=-=-=-=-=-=-=-=-=D=J=7=X=P=L=-=-=-=-=-=-=-=-=-=-=-=-=- -=-=-=-=-=-=-=-=-=-=-=-=-=I=R=A=N=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author : Dj7xpl / Dj7xplatYahoodotcom Type : Local File Inclusion Vulnerabilitiy By Cookie...

AKLINK-SA-2007-002.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ ||| Security Advisory AKLINK-SA-2007-002 ||| ||| CVE-2007-1363 CVE candidate ||| ||| CVE-2007-1364 CVE candidate ||| ============================================ DropAFew - Multiple vulnerabilities SQL...

phpechooms-xss.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...

phpfusion-sql.txt

PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/ --------------------------------...

WarFTP 1.65 - 'USER' Remote Buffer Overflow

include include include define VULNSERVER "WAR-FTPD 1.65" define VULNCMD "\x55\x53\x45\x52\x20" define ZERO '\x00' define NOP '\x90' define VULNBUFF 485 define BUFFREAD 128 define PORT 21 define LENJMPESP 4 / WARFTP - VERSION 1.65 WarFTP Username Stack-Based Buffer-Overflow Vulnerability...

rot13-lfi.txt

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Rot 13 = enkrypt.php Remote File Disclosure Vulnerability Script: Rot 13 Download: http://www.holtstraeter.com/cybercheffe/scriptsharing/php/categories/misc/rot13.zip Class: Remote File Disclosure Vulnerability Discover: BorN To K!LL...

WebLog - 'index.php' Remote File Disclosure

.-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +Iranian Are The Best In World+ Portal : weblog Download : http://www.holtstraeter.com/cybercheffe/pages/websoft.php?action=websoftpagefive Author : Dj7xpl | [email protected] Dork : "C by CyberTeddy" Class :...

Plan 9 Kernel (devenv.c OTRUNC/pwrite) Local Exploit

No description provided by source. / !!! DO NOT DISTRIBUTE !!! / / identity theft this exploit uses my devenv.c OTRUNC/pwrite vulnerability to overwrite specific kernel addresses to help elevate our privileges. this exploit is very picky, so you must understand the plan9 kernel and know what you...

AgerMenu 0.01 (top.inc.php rootdir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== AgerMenu 0.01 top.inc.php rootdir Remote File Include Vulnerability =====================================================================...

AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion

AgerMenu 0.01 - top.inc.php?rootdir Remote File Inclusion =============================================================== Discovered by GolDMMahmnoodali & & Contact: [email protected] =============================================================== URL Script:...

WebBuilder 2.0 - StageLoader.php Remote File Inclusion

WebBuilder 2.0 - StageLoader.php Remote File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= WebBuilder = 2.0 Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovere...

GuppY <= 4.5.16 Remote Commands Execution Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Guppy = 4.5.16 remote commands execution exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: "Site powered by GuppY" | "Site cr驠avec Gupp...

Makit Newsposter Script News_Page.ASP SQL注入漏洞

Makit Newsposter Script是一款基于ASP的WEB应用程序。 Makit Newsposter Script不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'NewsPage.ASP'脚本对用户提交的'uid'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Makit Newsposter Script 目前没有详细解决方案提供： http://www.makit.net/...

aspedge12b-sql.txt

Title : ASP EDGE = V1.2b user.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://aspedge.cjb.net || http://www.planetsourcecode.com/vb/scripts/ShowCode.asp?txtCodeId=7530&lngWId=4 $$ : Free SQL---------------------------------------------------------...