87 matches found
IPTBB 0.5.6 Arbitrary Add-Admin Exploit
Exploit for unknown platform in category web applications ======================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ======================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
IPTBB 0.5.6 - Arbitrary Add Admin
========================================= IPTBB 0.5.6 Arbitrary Add-Admin Exploit ========================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / /...
WSN Guest 1.21 (comments.php id) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= WSN Guest 1.21 comments.php id Remote SQL Injection Exploit ============================================================= WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection...
Grep with web vulnerability discovery-vulnerability warning-the black bar safety net
Grep with web vulnerability mining Text/SuperHeiAtph4nt0m.org 2006-03-08 a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin...
Merak Mail Server 7.4.5 - address.html Multiple Cross-Site Scripting Vulnerabilities
Merak Mail Server 7.4.5 - address.html Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/10966/info The webmail package embedded in Merak Mail Server is reported prone to multiple vulnerabilities. The vulnerabilities reported are: - Multiple cross-site...
Microsoft Internet Explorer - URL Injection in History List (MS04-004)
Microsoft Internet Explorer - URL Injection in History List MS04-004 // Andreas Sandblad, 2004-02-03, patched by MS04-004 // Name: payload // Purpose: Run payload code called from Local Machine zone. // The code may be arbitrary such as executing shell commands. // This demo simply creates a...
CVE-2002-0607
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters 1 MNAME, 2 UserName, 3 FirstName, 4 LastName, or 5 INITIAL...