limboExec.txt

Official page : http://www.limbo-cms.com/ Vulnerable : Limbo 1. Fix : No Bug : http://somehost/path-to-limbo/index.php?option=frontpage&Itemid=systemCODE example : index.php?option=frontpage&Itemid=systemuname Google search string : inurl:"option=frontpage" -- Best Regards, Aleksander Hristov...

Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit

No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...

Helm XSS Vulnerability

I.Vulnerability Helm Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Web Host Automation Ltd. www.webhostautomation.com III.Affected Systems Helm v3.2.8 and probably previous versions. IV.About Helm is a multi-server management and hosting control system for Windows 2000 and 20...

cyphorSQL.txt

Hello This is sql injection in cyphor Discovered by : HACKERS PAL Greets For Devil-00 - Abducter - Almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected vresions :- Cyphor Release: 0.19 and all Versions Up To now -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- injected File show.php...

Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Arki-DB 1.0 catid Remote SQL Injection Vulnerabilities ======================================================== ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's...

Arki-DB 1.0 - catid SQL Injection

Arki-DB 1.0 - catid SQL Injection ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's ---------------------- Bug By Devil-00 [email protected] Whe Ar All Love Security4Arab For Ever S4a.cc ------------------------------------------------- Explorer Exploit By Devil-00...

[Full-disclosure] RANKBOX <= XSS vulnerability

Advisory 1 Title: "RANKBOX = XSS vulnerability" Author: spyburn Contact: [email protected] Website: elitemexico.org Date: 07/11/2005 Risk: High Vendor Url: http://chamberofgold.com Affected Software: RANKBOX Non Affected: We Are: ELITE MEXICO...

MultiTheftAuto 0.5 patch 1 Server Crash and MOTD Deletion Exploit

Exploit for unknown platform in category dos / poc ================================================================= MultiTheftAuto 0.5 patch 1 Server Crash and MOTD Deletion Exploit ================================================================= / by Luigi Auriemma / include include ifdef WIN3...

P2P Pro 1.0 - command Denial of Service

P2P Pro 1.0 - command Denial of Service / P2P Pro Command DOS Exploit ------------------------------------ Infam0us Gr0up - Securiti Research Info: infamous.2hell.com Vendor URL: http://www.digital-revolution.org/P2PPro.html / include string.h include winsock2.h include stdio.h pragma commentlib,...

CA BrightStor ARCserve Backup - Remote Overflow

/ 02/20/2005 This is provided as proof-of-concept code only for educational purposes and testing by authorized individuals with permission to do so. exploit by : cybertronic cybertronicatgmxdotnet This exploits the following vulnerabilities: Computer Associates BrightStor ARCserve Backup Agent fo...

RaXnet Cacti 0.50.6.x0.8.x - Graph_Image.php Remote Command Execution Variant

RaXnet Cacti 0.50.6.x0.8.x - GraphImage.php Remote Command Execution Variant source: https://www.securityfocus.com/bid/14129/info RaXnet Cacti is prone to a remote command execution vulnerability that manifests in the 'graphimage.php' script. The issue is due to a bug in the input filters that...

IAeMailServer_DOS.pl.txt

Summary: Denial of Service Vulnerability in True North Software, Inc. IA eMailServer Corporate Edition Version: 5.2.2. Build: 1051. http://www.tnsoft.com/ Details: Input to the IMAP4 LIST command is not properly checked and/or filtered. Issuing a single character '%x' as the second argument to th...

claroline16.txt

Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; Please replace yo...

PeerCast 0.1211 - Remote Format String

PeerCast 0.1211 - Remote Format String / \ PeerCast \ / by Darkeagle darkeagle at linkin-park dot cc \ / uKt researcherz http://unl0ck.org \ / greetz goes to: uKt researcherz. \ / \ - smallest code - better code!!! / / include include include include include include include include include includ...

WheresJames Webcam Publisher Beta 2.0.0014 Remote Buffer Overflow

No description provided by source. / WheresJames Webcam Publisher Beta 2.0.0014 POC www.wheresjames.com Bug and Exploit by : Miguel Tarascó Acuña - Haxorcitos.com 2005 Tarako AT gmail.com - Tarako AT Haxorcitos.com Platforms tested: - Windows 2000 SP4 Spanish - Probably All Windows 2000 versions...

linkslinks.txt

SQL Injection was found in the Variable $id in : LinksLinks Pro Mod vulnerable system : phpBB 2.0.x exploit : links.php?func=show&id='SQL Injection Bug Found by : LovER BOY SecurityGurus Team www.securitygurusd0tNet...

Sentinel LM 7.x - UDP License Service Remote Buffer Overflow

/ SentinelLM, UDP License Service Stack Overflow Homepage: safenet-inc.com Affected version: 7. Patched version: 8.0 Link: safenet-inc.com/products/sentinel/lm.asp Date: 09 March 2005 Advisory: securitytracker.com/alerts/2005/Mar/1013385.html Application Risk: High Internet Risk: Medium UDP...

BadBlue 2.5 - Easy File Sharing Remote Buffer Overflow

/ BadBlue, Easy File Sharing Remote BOverflow Homepage: badblue.com Affected version: v2.5 2.60 and below not tested Patched version: v2.61 Link: badblue.com/bbs98.exe Date: 27 February 2005 Application Risk: Severely High Internet Risk: Low Dicovery Credits: Andres Tarasco atarasco at sia.es...

BadBlue 2.55 Web Server Remote Buffer Overflow

No description provided by source. / Badblue 2.55 Web Server remote buffer overflow Version: BadBlue Personal Edition v2.55 Date: Dec. 9, 2004 Tested under Windows 2000 Professional SP3/SP4 Spanish Windows 2000 Server SP4 Spanish Windows XP SP1 Spanish Credits: Andres Tarasco atarasco at sia.es h...

phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload

source: https://www.securityfocus.com/bid/12653/info phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an announcement. A remote attacker may exploit...