224 matches found
DCP-Portal 6.11 - SQL Injection
!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...
ZeusCMS 0.3 - Blind SQL Injection
query"SELECT FROM $table WHERE url like '%$ref%' AND status='BLOCKED'"; numRows0 137. return true; 138. 139. else 140. return false; 141. 142. else 143. return false; 144. an attacker can inject sql code through http referer header, that isn't properly checked... Possible bug fix in /index.php :...
runcms-overwrite.txt
RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...
IceBB 1.0-rc6 Remote Database Authentication Details Exploit
Exploit for unknown platform in category web applications ============================================================ IceBB 1.0-rc6 Remote Database Authentication Details Exploit ============================================================ ./includes/functions.php, line 73 $ip =...
phpstats-multi.txt
32 break; 100. 103. $title='?'; 104. if$option'pagetitle' && isset$GET't' 105. 106. $tmpTitle=htmlspecialcharsaddslashesurldecode$GET't'; 107. if$tmpTitle!='\\\" t \\\"' $title=$tmpTitle; 108. 109. 174. if $loaded=='?' && $title!='?' 175. $result=sqlquery"SELECT lastpage FROM...
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities 32 break; 100. 103. $title='?'; 104. if$option'pagetitle' && isset$GET't' 105. 106. $tmpTitle=htmlspecialcharsaddslashesurldecode$GET't'; 107. if$tmpTitle!='\\\" t \\\"' $title=$tmpTitle; 108. 109. 174. if $loaded=='?' && $title!='?' 175...
Gelato SQL Injection exploit
? Gelato SQL Injection exploit Dork: "powered by gelato cms" Homepage: http://gelatocms.com s 0 c r a t e x msn: s0cratexatnasadotgov greetz: D.O.M and plexinium team iniset"maxexecutiontime",0; function gettext $in = fopen"php://stdin", 'r'; $text = fgets$in, 1024; $text = trim$text; return $tex...
Hexamail Server 3.0.0.001 - 'pop3' Remote Overflow (PoC)
milw0rm.com 2007-08-30...
Easy Chat Server 2.2 Remote Denial of Service Exploit
No description provided by source. ?php ---------------------------------------------------- --------Easy Chat Server Remote DoS Exploit--------- ---------------------------------------------------- -http://www.echatserver.com/------------------------...
ecs-dos.txt
?php ---------------------------------------------------- --------Easy Chat Server Remote DoS Exploit--------- ---------------------------------------------------- -http://www.echatserver.com/------------------------ ---------------------------------------------------- -Tested on version 2.2 last...
phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit
!/usr/bin/php -q -d shortopentag=on ? print ' //'=============================================================================================== //'Script : phpDVD v1.0.4 //'Author : iLker Kandemir ilkerkandemiratmynet.com //'S.Page : http://ugo.scarlata.it/phpdvd/phpDVD-1.0.4.tar.gz //'Dork :...
minibb205-lfi.txt
? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- !...
AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
Exploit for unknown platform in category web applications ==================================================================== AlstraSoft Template Seller Pro = 3.25 Admin Password Change Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=...
Alstrasoft Template Seller Pro 3.25 - Admin Password Change
Alstrasoft Template Seller Pro 3.25 - Admin Password Change !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally ...
Alstrasoft Template Seller Pro 3.25 - Remote Code Execution
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path CMD Host: target server ip/hostname Path: path of template CMD: A Shell Command Example: php ".$argv0." localhost /template/ cat /etc/passwd"; die;...
phpwind 5.0.1 SQL Injection Vulnerability Exploit
No description provided by source. 0 ? intval$argv3:1; echo "\r\nLogging\t........"; ifislogin echo "Login Ok!\r\n"; else die"Not Login!\tCheck Your Cookie and Useragent!\r\n"; echo "Testing\t........"; iftest echo "Vul!\r\n"; else di...
Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b admin 2 exec exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork example: inurl:php-stats.js.php...
PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
source: https://www.securityfocus.com/bid/22037/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data...
HLStats 1.34 - 'hlstats.php' SQL Injection
= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...