2886 matches found
webEdition CMS <= 6.0.0.4 LFI Vulnerability - Active Check
webEdition CMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
My Simple Forum 7.1 Command Execution
!/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits to Giovanni Buzzin, "Osirys"...
My Simple Forum 7.1 (LFI) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== My Simple Forum 7.1 LFI Remote Command Execution Exploit ========================================================== !/usr/bin/perl My Simple Forum v7.1 Remote Command Execution...
My Simple Forum 7.1 - Remote Command Execution
!/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits to Giovanni Buzzin, "Osirys"...
SurfMyTV Script 1.0 SQL Injection
0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...
SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability
No description provided by source. 0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged...
Jinzora Media Jukebox 2.8 Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...
Syzygy CMS 0.3 LFI / SQL Injection
!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...
SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= SurfMyTV Script 1.0 view.php id SQL Injection Vulnerability ============================================================= 0x01 Informations: Name : Media Entertainment Script 1....
Syzygy CMS 0.3 LFI/SQL Command Injection Exploit
No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...
Jinzora Media Jukebox <= 2.8 (name) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site:...
Jinzora Media Jukebox 2.8 - name Local File Inclusion
Jinzora Media Jukebox 2.8 - name Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site:...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...
SurfMyTV Script 1.0 - 'view.php?id' SQL Injection
0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...
Jinzora Media Jukebox 2.8 - 'name' Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =========================================================== PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit =========================================================== !/usr/bin/php ?php / Found this after getting my inet back...
Pluck CMS 4.6.1 (module_pages_site.php post) LFI Exploit
Exploit for unknown platform in category web applications ======================================================== Pluck CMS 4.6.1 modulepagessite.php post LFI Exploit ======================================================== ?php / pluck v 4.6.1 LFI exploit autor : Alfons Luja Vuln is in...
Syzygy CMS 0.3 - Local File Inclusion SQL Injection
Syzygy CMS 0.3 - Local File Inclusion SQL Injection !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shel...
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...
Syzygy CMS 0.3 - Local File Inclusion / SQL Injection
!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...