152 matches found
PHPNews SQL injection vulnerability
Product: PHPNews Version: 1.2.5 Release, bugfix 1.2.6 and previous URL: http://newsphp.sourceforge.net/ VULNERABILITY CLASS: SQL injection PRODUCT DESCRIPTION PHPNews is a popular script for news posting written in PHP MySQL based. VULNERABILITY Vulnerable script: auth.php code else...
FreeBSD : oops -- format string vulnerability (1033750f-cab4-11d9-9aed-000e0c2e438a)
A RST/GHC Advisory reports that there is an format string vulnerability in oops. The vulnerability can be found in the MySQL/PgSQL authentication module. Succesful exploitation may allow execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Xoops = 2.0.11 xmlrpc.php sql injection exploit by RST/GHC based on http://www.gulftech.org/?node=research&articleid=00086-06292005 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru example: r57xoops.pl -u http://www.xoops2.ru/xmlrpc.php ...
Mambo <= 4.5.2.1 SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================== Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE...
Forum Russian Board 4.2 Full Command Execution Exploit
No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...
Mambo 4.5.2.1 - SQL Injection
Mambo 4.5.2.1 - SQL Injection !/usr/bin/perl Mambo 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 0 print qq\b\b DONE --------------------------------------------------------------- USER ID : $memberid HASH : $allchar...
MercuryBoard 1.1.4 - SQL Injection
MercuryBoard 1.1.4 - SQL Injection !/usr/bin/perl MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf RST/GHC -...
MercuryBoard <= 1.1.4 SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================== MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if...
Forum Russian Board 4.2 - Full Command Execution
Forum Russian Board 4.2 - Full Command Execution !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru ,...
MercuryBoard <= 1.1.4 SQL Injection Exploit
No description provided by source. !/usr/bin/perl MercuryBoard =1.1.4, MySQL = 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf...
Mambo <= 4.5.2.1 SQL Injection Exploit
No description provided by source. !/usr/bin/perl Mambo = 4.5.2.1, MySQL = 4.1 sql injection exploit by RST/GHC coded by 1dt.w0lf , 21.06.05 http://rst.void.ru , http://ghc.ru use IO::Socket; if @ARGV 3 $server = $ARGV0; $path = $ARGV1; $memberid = $ARGV2; $newsid = 1; $newsitemid = 1; $server =...
AWStats 5.7 - 6.2 Multiple Remote Exploit (extra)
Exploit for cgi platform in category web applications ================================================= AWStats 5.7 - 6.2 Multiple Remote Exploit extra ================================================= / Awstats exploit "shell" code by omin0us omin0us208 at gmail dot com dtors security group .:...