PT-2007-2719 · Sava · Sava'S Guestbook

Name of the Vulnerable Software and Affected Versions: Sava's Guestbook version 23.11.2006 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting SQL injection vulnerabilities in the add2.php file via the...

AIOCP SQL Injection Vulnerability

i Product Name: AIOCP - All In One Control Panel i Vulnerable Versions: = 1.3.009 i Bug found by: Coloss i Contact: [email protected] i Date: 9.1.2007 i Spec: Parameter 'did' is not checked before it's used in a SQL Query so you are able to inject some evil SQL code Example shows how to retrieve...

HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit

No description provided by source. brb ?php / Live Exploit Code SQL Inection + Path Disclosure Affects HLStats HLStats =1.34 and Hlstats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "titleHLStats SQL Injection Exploit/title body bgcolor='009900' font color='FF0000'...

HLStats 1.34 - 'hlstats.php' SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...

PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion

!/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected] File inclusion: www.site.com//viewticket.php?pmdlang=...

PHPMyDesk 1.0 Beta - viewticket.php Local File Inclusion

PHPMyDesk 1.0 Beta - viewticket.php Local File Inclusion !/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected]...

Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability

No description provided by source. phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code php/plugins/main.php: ?php...

PHP AMX 0.90 - pluginsmain.php Remote File Inclusion

PHP AMX 0.90 - pluginsmain.php Remote File Inclusion phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code...

Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Php AMX 0.90 plugins/main.php Remote File Include Vulnerability ================================================================= phpamx 0.90 Class: Remote|Local File Includ...

PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ PHPRecipeBook = 2.35 grbbasedir Remote File Include Exploit ================================================================ !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote...

Boonex Dolphin 5.2 - index.php Remote Code Execution

Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution !/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $pu...

PT-2006-3760 · Squirrelmail +1 · Squirrelmail +1

Name of the Vulnerable Software and Affected Versions: SquirrelMail versions 1.4.6 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter, under specific conditions where register globals is enabled and magic quotes gpc is...

Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion

phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful exploitation needs registerglobals on GET ...

CVE-2006-2578

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...

phpListPro &lt;= 2.0.1 (Language) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache= "/var/log/httpd/accesslog%00",...

PHPSurveyor 0.995 - 'surveyid' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on works regardless of magicquotes gpc settings \r\n"; echo " with at least one row in 'surveys' table \r\n"; echo " and if we succeed to include logs \r\n"; echo "\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server...

PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================== PCPIN Chat works with magicquotesgpc = Off\r\n"; echo "dork: "powered by PCPIN.com"\r\n\r\n"; if $argc "" OR...

coppermine -- "file" Local File Inclusion Vulnerability

Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people to disclose sensitive information. Input passed to the "file" parameter in "index.php" isn't properly verified, before it is used to include files. This can be exploited to include arbitrary...

phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit

Exploit for unknown platform in category web applications ================================================================ phpWebSite arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: email protected\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if...