My Simple Forum 7.1 - Remote Command Execution

!/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits to Giovanni Buzzin, "Osirys"...

Jinzora Media Jukebox 2.8 Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...

SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged...

SurfMyTV Script 1.0 SQL Injection

0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...

Jinzora Media Jukebox 2.8 - name Local File Inclusion

Jinzora Media Jukebox 2.8 - name Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site:...

Syzygy CMS 0.3 LFI / SQL Injection

!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...

SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SurfMyTV Script 1.0 view.php id SQL Injection Vulnerability ============================================================= 0x01 Informations: Name : Media Entertainment Script 1....

PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

SurfMyTV Script 1.0 - 'view.php?id' SQL Injection

0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...

Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...

Jinzora Media Jukebox <= 2.8 (name) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site:...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...

PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit

Exploit for unknown platform in category web applications =========================================================== PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit =========================================================== !/usr/bin/php ?php / Found this after getting my inet back...

Syzygy CMS 0.3 - Local File Inclusion SQL Injection

Syzygy CMS 0.3 - Local File Inclusion SQL Injection !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shel...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

Exploit for unknown platform in category web applications ================================================ Syzygy CMS 0.3 LFI/SQL Command Injection Exploit ================================================ !/usr/bin/perl Web App : Syzygy CMS 0.3 Link :...

Pluck CMS 4.6.1 (module_pages_site.php post) LFI Exploit

Exploit for unknown platform in category web applications ======================================================== Pluck CMS 4.6.1 modulepagessite.php post LFI Exploit ======================================================== ?php / pluck v 4.6.1 LFI exploit autor : Alfons Luja Vuln is in...

Syzygy CMS 0.3 - Local File Inclusion / SQL Injection

!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution

!/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually believed this populated those...

Pluck CMS 4.6.1 - 'module_pages_site.php' Local File Inclusion

", "../apache/logs/access.log", "../../apache/logs/access.log", "../../../apache/logs/access.log", "../../../../apache/logs/access.log", "../../../../../apache/logs/access.log", "../../../...

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...