2631 matches found
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================== LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit ============================================================== ?php /...
EasyNews 40tr (SQL/XSS/LFI) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash &...
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion
EasyNews 40tr - SQL Injection Cross-Site Scripting Local File Inclusion !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
EasyNews 40tr (SQL/XSS/LFI) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== EasyNews 40tr SQL/XSS/LFI Remote SQL Injection Exploit ======================================================== !/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL...
Terracotta Personal Edition Multiple vulnerabilities
Its been awhile since I've posted something, so lets get to the goods. Terracotta is a an open source CMS from http://sourceforge.net/projects/terracotta/ First up, we have Full path disclosure vulnerabilities in the GET'd variable 'File'. Specify something other than whats in the list and we get...
EasyNews 40tr - SQL Injection / Cross-Site Scripting / Local File Inclusion
!/usr/bin/perl EasyNews-40tr Multiple Remote Vulnerabilities SQL Injection Exploit/XSS/LFI Discovered by : IRCRASH By Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://myiosoft.com/download/EasyNews/easynews-40tr.zip XSS Address :...
JShop 1.x - 2.x (page.php xPage) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== JShop 1.x - 2.x page.php xPage Local File Inclusion Vulnerability =================================================================== JShop 1.x-2.x local file include...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= BolinOS 4.6.1 LFI/XSS Multiple Security Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-022...
[DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b
DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory: 24.03.2008...
Mambo/joomla com_intellect "page" LFI [Aria-Security]
Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...
joomlaintellect-lfi.txt
Aria-Security Team Persian Security Team http://forum.aria-security.com For English http://forum.aria-security.net For Farsi ------------------------------------------ Greetz: Aura, NULL, Kinglet, t3rr0r1st, Mambo/joomla comintellect "page" LFI Poc:...
[DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6
Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public Advisory:...
seagull-lfi.txt
fuzion / // /\ / / : //\ /| : : .. / \ | | :: :: \ / | | :| || \ / | | || || |\ / | | || || | / | \ | || || | / /\ \ | || || | / / \ -/ -/ | |// \ --/ \ / / / / \ / \/ Product: Seagull STABLE 0.6.3 http://seagullproject.org/ Vulnerable: optimizer.php; line 61 // get files and it's mod...
Mini File Host 1.2.1 - language Local File Inclusion
Mini File Host 1.2.1 - language Local File Inclusion !/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request...
Mini File Host 1.2 (upload.php language) LFI Vulnerability
No description provided by source. Mini File Host = 1.2 Local File Inclusion Vulnerability AUTHOR : Scary-Boys HOME : http://scary-boys.com Download : http://galaxyscripts.com/forum/downloads.php?do=file&id=1 DorKs : "Powered By Mini File Host V1.2" EXPLOIT :...
NetRisk 1.9.7 - Cross-Site Scripting / SQL Injection
...:::::netrisk 1.9.7 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security team hadihadi --------------------------------- special tnx to:MR.nosrati,black.shadowes,MR.hesy,satan,Zahra & all...
NetRisk <= 1.9.7 Remote/Local File Inclusion Vulnerability
No description provided by source. NetRisk = 1.9.7 Remote/Local File Inclusion Vulnerability AUTHOR : S.W.A.T. HOME : http://svvat.ir Download : http://phprisk.org/netrisk1.9.7.zip DorKs : inurl:index.php?page=gamebrowser EXPLOIT :...
xcms-rfilfi.txt
| ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0 Hash disclosure...
XCMS 1.82 - Local/Remote File Inclusion
| ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0 Hash disclosure...