277 matches found
DEDECMS v5. 5 GBK Final of a chicken-vulnerability-vulnerability warning-the black bar safety net
In the session. autostart turned on in the case can be arbitrarily to cover the$SESSION variable, we can forge the admin login and upload the file /DedeCmsV55-GBK-Final/uploads/include/dialog/selectsoftpost.php When uploading renamed to . php. You can bypass the check upload shell exp: | 1 2 3 4 ...
South Korea gnuboard Forum vulnerability EXP and the use of method-vulnerability warning-the black bar safety net
The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection EXP: Copy the code ? php echo"...
South Korea gnuboard Forum vulnerability EXP and method of use-vulnerability warning-the black bar safety net
Excerpt from: the Red section of the network security http://bbs.honkwin.com 1. The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection...
PulseAudio (setuid) Priv. Escalation Exploit (ubu/9.04)(slack/12.2.0)
No description provided by source. PulseAudio setuid Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/35721 Credit for discovery of bug: Tavis Ormandy, Julien Tinnes and Yorick Koster -- Put files in /tmp/pulseaudio-exp or change config.h. Must be on same fs as the...
PHPWIND & DISCUZ! CSRF vulnerability-vulnerability warning-the black bar safety net
PHPWIND & DISCUZ! CSRF vulnerability affects versions: Discuz! 6.0.0 & 6.1.0 & 7.0.0 PHPWIND 6.0 & 6.3 & 7.0 Vulnerability description: PHPWIND & DISCUZ! The presence of CSRF vulnerabilities, triggering PHPWIND & DISCUZ! CSRF WORM! ... d/b31e4d2e6270c384 reference ... d/b31e4d2e6270c384 Safety...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com notes the value of the variable, add your own to modify / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value her...
DMXReady Blog Manager <= 1.1 Remote File Delete Vulnerability
Exploit for unknown platform in category web applications ============================================================= DMXReady Blog Manager ajann Exp Delete File : Form Action: http://target/path/includes/sharedscripts/wysiwygeditor/assetmanager/assetmanager.asp?ffilter= Delete File Path:...
MSN cross-site vulnerability analysis-vulnerability warning-the black bar safety net
As early as a few days ago, heard colleagues say,“friends msn send to a web page, enter the password, the results a few days later, the MSN password is wrong, could be stolen.” At that time also asked colleagues want the address, but he said address not found. A few days later a friend said to se...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
| !/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the val...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com Notes the value of the variable, add your own modifications / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value...
LightBlog 9.8 (GET,POST,COOKIE) Multiple LFI Vulnerabilities
No description provided by source. LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was...
Sql injection
SQL injection vulnerability in the EXP Shop comexpshop component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showpayment action to index.php...
CVE-2008-2892
SQL injection vulnerability in the EXP Shop comexpshop component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showpayment action to index.php...
CVE-2008-2892
The CVE-2008-2892 entry describes a SQL injection vulnerability in the Joomla! Feellove Exp Shop Component (com_expshop) version 1.0. The issue allows remote attackers to execute arbitrary SQL commands through the catid parameter in the show_payment action to index.php. The vulnerability arises i...
CVE-2008-2892
SQL injection vulnerability in the EXP Shop comexpshop component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showpayment action to index.php...
CVE-2008-2892: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the EXP Shop comexpshop component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a showpayment action to index.php...
Joomla Component EXP Shop (catid) SQL Injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component expshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comexpshop POC :...
Joomla Component EXP Shop (catid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= Joomla Component EXP Shop catid SQL Injection Vulnerability ============================================================= Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comexpshop...
Joomla! Component EXP Shop 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/29869/info The EXP Shop component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Joomla! Component EXP Shop - catid SQL Injection
Joomla! Component EXP Shop - catid SQL Injection /---------------------------------------------------------------\ \ / / Joomla Component expshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comexpshop POC...