mypage 0.4 - Local File Inclusion

mypage 0.4 - Local File Inclusion mypage0.4 LFI Vulnerability Author: BAYBORA Site: www.1923turk.biz Exploit: Vuln file: index.php?page=LFI Exploit: POST http://server/index.php?page=../../../../../../../../etc/passwd index.php ifisset$GET'page' ... $inhalt=$inhaltsordner."/".$GET'page';...

weenCompany - SQL Injection

weenCompany - SQL Injection weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Site: www.1923turk.biz Site: http://gamoscu.wordpress.com/ Dork:"Created by weenCompany" Exploit: http://server/index.php?moduleid=m2newsSQL-inj&articleid=1 Greetz: Manas58 Baybora...

mypage 0.4 - Local File Inclusion

mypage0.4 LFI Vulnerability Author: BAYBORA Site: www.1923turk.biz Exploit: Vuln file: index.php?page=LFI Exploit: POST http://server/index.php?page=../../../../../../../../etc/passwd index.php ifisset$GET'page' ... $inhalt=$inhaltsordner."/".$GET'page'; ... $inhalt=strreplace"///","",$inhalt; if...

weenCompany SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================= weenCompany SQL Injection Vulnerability ======================================= weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Dork:"Created by weenCompany"...

Drumbeat CMS 1.0 SQL Injection

Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux ----------------------------------------- Drumbeat CMS SQL Injection Exploit + Discovered and notified by Sora A SQL injection exploit is found in Drumbeat CMS. The vulnerability exists in where there is an...

CVE-2009-4364

CVE-2009-4364 describes a Cross-site Scripting (XSS) vulnerability in the ScriptsEz Ez Blog, affecting the application’s index.php where the cname parameter can inject arbitrary web script/HTML (related to the act and id parameters). The root cause is insufficient input validation on cname. Impac...

Joomla! Component com_mediaslide - Directory Traversal

Joomla! Component commediaslide - Directory Traversal Joomla Component commediaslide Directory Traversal Vuln author : Mr.tro0oqy from Yemen mail : [email protected] fuck 2 community college sanaa exp : http://server/components/commediaslide/viewer.php?path=/../.. dork :...

Drumbeat CMS 1.0 - SQL Injection

Drumbeat CMS 1.0 - SQL Injection Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux ----------------------------------------- Drumbeat CMS SQL Injection Exploit + Discovered and notified by Sora A SQL injection exploit is found in Drumbeat CMS. The...

Drumbeat CMS SQL Injection Exploit

Exploit for unknown platform in category web applications ================================== Drumbeat CMS SQL Injection Exploit ================================== Vendor: http://www.drumbeatcms.com.au/ Version: Version 1.0 Tested on: Windows and Linux -----------------------------------------...

CVE-2009-4350

SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Harold Bakker's NewsScript HB-NS 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146...

CVE-2009-4348

The CVE-2009-4348 entry concerns Harold Bakker’s NewsScript (HB-NS) 1.3, where a Cross‑Site Scripting (XSS) flaw exists in index.php. The bug is triggered via the topic parameter in a topic action, enabling remote attackers to inject arbitrary script/HTML. This vulnerability is documented as a se...

CVE-2009-4350

CVE-2009-4350 is a SQL injection vulnerability in Arctic Issue Tracker 2.1.1 (index.php). The issue allows remote attackers to inject arbitrary SQL via (1) matchings[id] or (2) matchings[title] in a Login action to an unspecified program, or (3) matchings[id] in a search action to index.php. This...

Uploader by CeleronDude 5.3.0 Shell Upload

Exploit for unknown platform in category web applications ========================================== Uploader by CeleronDude 5.3.0 Shell Upload ========================================== Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 Dork : "Uploader...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4318

CVE-2009-4318 describes a cross-site scripting (XSS) vulnerability in Real Estate Manager 1.0.1, where the parameter lang in index.php can be exploited to inject arbitrary script/HTML. The primary sources (NVD) confirm the issue and source text notes that some details come from third parties; no ...

Ez Cart Cross Site Scripting

========================= Author : anti-gov contact: anti-govathotmail.com ========================= script:Ez Cart vendor:http://www.scriptsez.net Exploit: http://localhost/index.php?action=showcat&cid=1&sid=XSS demo: http://www.scriptsez.com/ezcartdemo/index.php?action=showcat&cid=1&sid="alert1...

Real Estate Manager 1.0.1 XSS

Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage...

Real Estate Manager 1.0.1 - XSS

No description provided by source. Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x...

CVE-2009-4249

Multiple cross-site scripting XSS vulnerabilities in CutePHP CuteNews 1.4.6, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the 1 lastusername and 2 mod parameters to index.php; and 3 the title parameter to...