2594 matches found
phpTournois G4 - Arbitrary File Upload / Code Execution
Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we are not loggued in, this var is not defined. So, using registerglobals, we can define it and let the CMS think we are authentificated. Using configuration zo...
LinPHA 1.3.3 Plugin Maps - Remote Command Execution
LinPHA 1.3.3 Plugin Maps - Remote Command Execution ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================== LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit ============================================================== ?php /...
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
LinPHA 1.3.3 Plugin Maps - Remote Command Execution
?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://linpha.sourceforge.net details..: wor...
EasyNews 40tr (SQL/XSS/LFI) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash &...
EasyNews 40tr (SQL/XSS/LFI) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== EasyNews 40tr SQL/XSS/LFI Remote SQL Injection Exploit ======================================================== !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL...
Terracotta Personal Edition Multiple vulnerabilities
Its been awhile since I've posted something, so lets get to the goods. Terracotta is a an open source CMS from http://sourceforge.net/projects/terracotta/ First up, we have Full path disclosure vulnerabilities in the GET'd variable 'File'. Specify something other than whats in the list and we get...
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion
!/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://myiosoft.com/download/EasyNews/easynews-40tr.zip XSS Address :...
JShop 1.x - 2.x (page.php xPage) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== JShop 1.x - 2.x page.php xPage Local File Inclusion Vulnerability =================================================================== JShop 1.x-2.x local file include...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= BolinOS 4.6.1 LFI/XSS Multiple Security Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-022...
[DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b
DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: 24.03.2008...
joomlaintellect-lfi.txt
Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...
Mambo/joomla com_intellect "page" LFI [Aria-Security]
Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...
[DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6
Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory:...
seagull-lfi.txt
fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: optimizer.php; line 61 // get files and it's mod...
Mini File Host 1.2.1 - language Local File Inclusion
Mini File Host 1.2.1 - language Local File Inclusion !/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request...
Mini File Host 1.2 (upload.php language) LFI Vulnerability
No description provided by source. Mini File Host = 1.2 Local File Inclusion Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://galaxyscripts.com/forum/downloads.php?do=file&id=1 DorKs : "Powered By Mini File Host V1.2" EXPLOIT :...
NetRisk 1.9.7 - Cross-Site Scripting / SQL Injection
...:::::netrisk 1.9.7 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi --------------------------------- special tnx to:MR.nosrati,black.shadowes,MR.hesy,satan,Zahra & all...