403 matches found
Tiger PHP News System 1.0b build 39 Remote SQL Injection Vulnerability
No description provided by source. / Tiger PHP News System SQL Injection Bug found bY 0in from DaRk-Coders Group! Homepage: http://dark-coders.4rh.eu or http://dark-coders.prv.pl IRC:dark-coders at irc.freenode.org Email: 0indotemailatgmaildotcom / Script home: http://tpns.k-na.se/ Exploit:...
xeCMS 1.x (view.php list) Remote File Disclosure Vulnerability
No description provided by source. -------------------------------------------------------------- xeCMS 1.x.x Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://xecms.sunsite.dk/ author : p4imi0 contact : [email protected] exploit...
SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
wordsmith-rfi.txt
--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software: WordSmith 1.0 RC1 SF page:...
PHPress 0.2.0 - 'adisplay.php?lang' Local File Inclusion
:::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | // :::::::::::::::::::::::::::::We...
Comicsense 0.2 (index.php epi) Remote SQL Injection Vulnerability
No description provided by source. Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The...
W1L3D4 Philboard 0.2 (W1L3D4_bolum.asp forumid) SQL Injection Vuln
No description provided by source. Discovered by: gsy & kerem125 Website: www.kerem125.com script download:http://www.aspindir.com/indir2.asp?id=4891&sIslem=%DDndir exploit:/W1L3D4bolum.asp?forumid=-99+union+all+select+0,1,2,3,4,5,6,7,8,9,password,username,12,13,14,15,16,17,18,19,20+from+users...
xtnew01-sqlxss.txt
Xt-News 0.1 ----------- Vendor site: http://dreaxteam.free.fr/forums/ Product: Xt-News 0.1 Vulnerability: SQL Injection Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 10/12/06 Public disclosure: 22/12/06 Description: ------------ SQL Injection Vulnerability:...
ProFTPD <= 1.3.0a (mod_ctrls support) Local Buffer Overflow PoC
Exploit for linux platform in category dos / poc =============================================================== ProFTPD = 1.3.0a modctrls support Local Buffer Overflow PoC =============================================================== Core Security Technologies - Corelabs Advisory ProFTPD...
news7-rfi.txt
======================================================================= news7 = news.php Remote File Inclusion Exploit ======================= ======================================================================= ======================== Bug in :news.php Vlu Code :...
news7 <= (news.php) Remote File Inclusion Exploit
======================================================================= news7 = news.php Remote File Inclusion Exploit ======================= ======================================================================= ======================== Bug in :news.php Vlu Code :...
FreeForum 0.9.7 (fpath) Remote File Include Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FreeForum 0.9.7 fpath Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discovered by XORONturkish hacker...
VMware 5.5.1 - COM Object Arbitrary Partition Table Delete
http://www.xsec.org Overview: On running windows system, you can't delete, format and change system dirver. \ VMware register a COM Object use for Virtual Disk, but it's very danger. \ I don't know how to name this issue. If you allow unsafe ActiveX and jscript, \ and has VMware installed, the...
smf.txt
-------------------------------------------------------------------------------- Title : smf forum for Mambo CMS = 1.3 Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Applicati...
PHP Live Helper 1.x - 'abs_path' Remote File Inclusion
--------------------------------------------------------------------------- PHP Live Helper =abspath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Remote : Yes Local : No Critical Level :...
foingInclude.txt
Foing managesongs.php Remote File InclusionphpBB Contact : email: [email protected] & msn: [email protected] Risk : High Class : Remote Script : Foing Version : 0.7.0 e previous --------------------------------------------------------------------- Vulnerable code :...
myNewsletter 1.1.2 - Username SQL Injection
myNewsletter 1.1.2 - Username SQL Injection source: https://www.securityfocus.com/bid/18287/info myNewsletter is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploi...
SaPHPLesson 2.0 - show.php SQL Injection
SaPHPLesson 2.0 - show.php SQL Injection source: https://www.securityfocus.com/bid/18117/info SaPHPLesson is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...
limboExec.txt
Official page : http://www.limbo-cms.com/ Vulnerable : Limbo 1. Fix : No Bug : http://somehost/path-to-limbo/index.php?option=frontpage&Itemid=systemCODE example : index.php?option=frontpage&Itemid=systemuname Google search string : inurl:"option=frontpage" -- Best Regards, Aleksander Hristov...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...