phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit

!-- phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit Vulnerable Variable: itemid Vulnerable File: modules/news/article.php Vulnerable: phpMySpace Gold v8.10 other versions should also be vulnerable Google d0rk: "Powered by phpMySpace Gold 8.10" John Martinelli [email protected]...

Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit

!-- Ripe Website Manager = 0.8.4 - SQL Injection Vulnerability and Cross-Site Scripting Exploit Vulnerable Variable: ripeformpost Cross-Site Scripting and SQL Injection possible Vulnerable File: contact/index.php Vulnerable: Ripe Website Manager = 0.8.4 Google d0rk: "Powered by Ripe Website...

pmsgold-sql.txt

phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploitdiscovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager"...

Ripe Website Manager 0.8.4 - '/contact/index.php?ripeformpost' SQL Injection

source: https://www.securityfocus.com/bid/23597/info Ripe Website Manager Ripe Website Manager discovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager" alert1;"...

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...

galix.txt

GaliX² v2.0 - Cross-Site Scripting Exploit GaliX² v2.0 - Cross-Site Scripting Exploitdiscovered by John MartinelliGoogle d0rk: "GaliX² v2.0" alert1;"...

nuclearbb-sql.txt

NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities Vulnerable: NuclearBB Alpha 1 Google d0rk: "This forum is powered by NuclearBB" ============= String Inputs ============= ---------------------------- login.php - $POST'submit' ---------------------------- username=xyz...

CodeBreak 1.1.2 (codebreak.php) Remote File Inclusion Exploit

No description provided by source. !-- CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability Google d0rk: intitle:"CodeBreak - Hidden Morse Code" Vulnerable Code: include$POST"processmethod" . "" . $POST"outputmethod" . ".inc"; John Martinelli [email protected]...

codebreak.txt

http://john-martinelli.com/work/codebreak.txt CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerabilitydiscovered by John MartinelliGoogle d0rk: intitle:"CodeBreak - Hidden Morse Code"...

CodeBreak 1.1.2 - codebreak.php Remote File Inclusion

CodeBreak 1.1.2 - codebreak.php Remote File Inclusion CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerabilitydiscovered by John MartinelliGoogle d0rk: intitle:"CodeBreak - Hidden Morse Code" milw0rm.co...

CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability

http://john-martinelli.com/work/codebreak.txt !-- CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability Google d0rk: intitle:"CodeBreak - Hidden Morse Code" Vulnerable Code: include$POST"processmethod" . "" . $POST"outputmethod" . ".inc"; John Martinelli [email protected]...

CodeBreak 1.1.2 (codebreak.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= CodeBreak 1.1.2 codebreak.php Remote File Inclusion Exploit ============================================================= CodeBreak codebreak.php processmethod - Remote File...

CodeBreak 1.1.2 - 'codebreak.php' Remote File Inclusion

CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerability CodeBreak codebreak.php processmethod - Remote File Inclusion Vulnerabilitydiscovered by John MartinelliGoogle d0rk: intitle:"CodeBreak - Hidden Morse Code" milw0rm.com 2007-04-11...

quizshock-xss.txt

QuizShock 1.6.1 Cross-Site Scripting Vulnerability QuizShock 1.6.1 Cross-Site Scripting Vulnerabilitydiscovered by John Martinelli alert551660661;"...

deskpro201-xss.txt

DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability DeskPRO v2.0.1 - Cross-Site Scripting Vulnerabilitydiscovered by John Martinelli alert1;"...

ubb-sql.txt

UBB.threads SQL Injection Vulnerability The variable 'C' in UBB.threads is susceptible to SQL injection. Vulnerability: http://target.com/ubbthreads.php?Cat=cat&C=' Vulnerable: UBB.threads = 6.1.1 Google d0rk: allintitle:"Forums powered by UBB.threads" John Martinelli [email protected]...

UBB.threads (<= 6.1.1) SQL Injection Vulnerability

UBB.threads SQL Injection Vulnerability The variable 'C' in UBB.threads is susceptible to SQL injection. Vulnerability: http://target.com/ubbthreads.php?Cat=cat&C=' Vulnerable: UBB.threads = 6.1.1 Google d0rk: allintitle:"Forums powered by UBB.threads" John Martinelli [email protected]...

CentOS 3 / 4 : openoffice.org (CESA-2007:0033)

Updated openoffice.org packages to correct security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenOffice.org is an office productivity suite that includes desktop application...

Show Password Admin In Script Uploadscript

Theif Password Script UploadScript All Versions To 1.02 Discovered By : Hasadya Raed Contact : [email protected] Script : UploadScript V1.0/ 1.02 Dark : Powered by Uploadscript v1.0/v1.02 Only Add This File After The Link : password.txt Expl : Http://www.Victim.Com/ScriptPath/password.txt Example ...

getID3 library and Audio, Mediafield - arbitrary code execution

The getID3 library used by Audio and Mediafield contains a directory with scripts demonstrating use of the library. These scripts allow any visitor to browse the filesystem, read and delete files or write to zero-byte files or files with an mp3 extension. These actions are only limited by the...