Allomani News 1.0 - Cross-Site Request Forgery (Add Admin)

News 1.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/newsscript.html === Exploit ===...

Allomani Audio and Video Library 2.7.0 - Cross-Site Request Forgery (Add Admin)

Audio & Video Library 2.7.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/audioandvideoscript.html === Exploit ===...

Allomani Movies Library 2.0 - Cross-Site Request Forgery (Add Admin)

Movies Library 2.0 XSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://allomani.com/en/moviesscript.html === Exploit ===...

SpoonFTP 1.2 - RETR Denial of Service

SpoonFTP 1.2 - RETR Denial of Service !/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 21\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A...

Joomla Jsjobs Blind SQL Injection

Found by : Cyb3r-1sT C0ntact : cyb3r-1st at hotmail.com ======================================================= +++++++++++++++++++ Script information+++++++++++++++++ ======================================================= Script :: Joomla Jsjobs component...

MySms 1.0 - Multiple Vulnerabilities

MySms v1.0 Multiple Vulnerabilities ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] === Exploit === 1Auth Bypass =============== www.site.com/MySms/admin/index.php Username: 'or'a'='a Password: 'or'a'='a 2CSRF ======= Add Admin...

PHP Link Directory 4.1.0 - Cross-Site Request Forgery (Add Admin)

PHP Link Directory 4.1.0 - Cross-Site Request Forgery Add Admin PHP Link Directory v4.1.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://www.phplinkdirectory.com/ .:. Dork : "Powered b...

Plogger Gallery 1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

Plogger Gallery 1.0 - Cross-Site Request Forgery Change Admin Password ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...

PHP Classifieds 7.3 Remote File Inclusion

================================== PHP Classifieds v7.3 RFI Vulnerability ================================== ==================================================== x ExpL0it TitLe : PHP Classifieds v7.3 RFI Vulnerability x DatE : 09 September 2010 x AutH0r : alsa7r x Contact : [email protected] x...

PHP Classifieds 7.3 - Remote File Inclusion

================================== PHP Classifieds v7.3 RFI Vulnerability ================================== ==================================================== x ExpL0it TitLe : PHP Classifieds v7.3 RFI Vulnerability x DatE : 09 September 2010 x AutH0r : alsa7r x Contact : [email protected] x...

Elite Gaming Ladders v3.5 SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Elite Gaming Ladders v3.5 SQL Injection Vulnerability ===================================================== - Elite Gaming Ladders v3.5 SQL Injection Vulnerability - ---Date : 2010-06-19...

Patient folder (THEME ASP) - SQL Injection

Patient folder THEME ASP - SQL Injection ============================================================ Patient folder THEME ASP Local SQL Injection Vulnerability ============================================================ ----------------------------------- By: SA H4x0r - Emails: [email protected] ...

Hampshire Trading Standards Script - SQL Injection

Hampshire Trading Standards Script - SQL Injection Title: Hampshire Trading Standards Script SQL Injection Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link:N/A Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : " inurl:tradeCategory.php?id= " Helllo Allz. Exploit :...

Book Gallery - aboutbook.php SQL Injection

Book Gallery - aboutbook.php SQL Injection Title: Book Gallery aboutbook.php SQL Injection Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link:N/A Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/path/aboutbook.php?id= == SQLi sh done MaiL...

WinDirectAudio Proof Of Concept

/usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n"; print "\nEvil WAV file create...

Tainos - Multiple Vulnerabilities

Tainos - Multiple Vulnerabilities ======================================================= Tainos Multiple Vulnerabilities ======================================================= Name: Tainos Multiple Vulnerabilities Vendor: www.tainos-webdesign.com Date: 2010/05/16 Author: Ashiyane Digital Securi...

Powered by iNetScripts - Arbitrary File Upload

==================================================== Powered by iNetScripts: Shell Upload Vulnerability ==================================================== Contact :Sec-q8 [email protected] Published: 2010-04-25 Home : http://Sec-Senter.com/vb ========= Exploit http://localhost/imagehost/ Dork...

Almnzm 2.1 - SQL Injection

Title: almnzm 2.1 1 Vulnerability Type = SQL Injection Example URL = index.php?a=pages&id=3' and 1=0 UnIon aLL Select 1,2,concatusername,0x3a,password,4,5,6,7 from almnzmcustomers--%20 ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

PHP Product Catalog - Cross-Site Request Forgery (Change Administrator Password)

PHP Product Catalog - Cross-Site Request Forgery Change Administrator Password /\ == \ /\ \ /\ \ \ \ Admin : Passwd Email : |-------------------------------------------------------------------------------| // End of attack -----------------------------------------------------------------...