Katalog Plyt Audio Index.PHP SQL注入漏洞

Katalog Plyt Audio是基于PHP的WEB应用程序。 Katalog Plyt Audio多个产品不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Katalog Plyt Audio Katalog Plyt Audio 1.0 目前没有解决方案提供： http://cdaudio.ovh.org/ ? / Author: Kacper Contact: [email protected]...

MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit"; $scriptname = "MDForum 2.0.1"; $scriptsite = "http://www.maxdev.pl/Contents,Download,View,8.phtml"; $dork = '"Powered by MDForum"'; // print ' :::::::::...

Ciamos CMS <= 0.9.6b (config.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+...

Phaos 0.9.2 - 'basename()' Remote Command Execution

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX,...