1850 matches found
Apache 1.3.6/1.3.9/1.3.11/1.3.12/1.3.20 Root Directory Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1284/info Apache HTTP Server 1.3.x win32 allows people to get a directory listing of a directory, if it is enabled in the config, even if an index file is present that would normally be displayed instead. This can be...
e107 Code Exec
No description provided by source. Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 = 0.7.20 Tested on: Linux/Windows !/usr/bin/perl -w e107 Code Exec // SploitAuthor: [email protected] These scrubs still haven't released ...
Pet Grooming Management System <= 2.0 Arbitrary Add-Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print -+- Pet Grooming Management System = 2.0 Arbitrary Add-Admin Exploit -+-\n; print -+- Discovered && Coded By: t0pP8uZz - Discovered On: 15 MAY 2008 -+-\n; print -+- Script Download:...
pL-PHP <= beta 0.9 - Local File Include Exploit
No description provided by source. !/usr/bin/perl pL-PHP = beta 0.9 Local File Include Exploit Discovered by cr4wl3r Contact : cr4wl3r!linuxmail.org use IO::Socket; use LWP::Simple; @apache= ../apache/logs/error.log, ../apache/logs/access.log, ../../apache/logs/error.log,...
Portail PHP < 1.3 - SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w SQL Injection Exploit for Portail PHP 1.3 This exploit show the username of the administrator of the portal and his password crypted in MD5 Related advisory: http://www.securityfocus.com/archive/1/398728/2005-05-21/2005-05-27/0 Coded by Alberto...
SturGeoN Upload Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18764/info SturGeoN Upload is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitat...
ADN Forum <= 1.0b Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------- ADN Forum = 1.0b Blind SQL Injection Exploit Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 01/10/2008 Download: http://sourceforge.net/projects/adnforum/...
Sagem Routers Remote Auth bypass Exploit
No description provided by source. !/usr/bin/perl Exploit Title: Sagem routers Remote auth bypass Exploit Date: 04/03/2010 Author: AlpHaNiX Software Link: null Version: Sagem Routers F@ST 1200/1240/1400/1400W/1500/1500-WG/2404 Tested on: Sagem F@ST 2404 Code : use HTTP::Request; use HTTP::Headers...
e107 <= 0.7.15 - (extended_user_fields) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/env perl e107 = 0.7.15 extendeduserfields Blind SQL Injection Exploit Description ------------------------------------------------------------------- e107 contains one flaw that allows an attacker to carry out an SQL injection attack. The issue is due ...
Simple PHP Blog 0.5.1 - Local File Inclusion Vulnerability
No description provided by source. Simple PHP Blog is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context ...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print Creating shell... Please wait\n; $gr...
Censtore <= 7.3.x (censtore.cgi) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl Censtore.cgi exploit by FOXMULDER [email protected] Vulnerability foud by FOXMULDER. This is the first exploit i release and the bug is not public so enjoy. Ask http://censtore.com/ what they think about it !!! use IO::Socket; use LWP::Simple; sub...
Blackboard Learning System 6.0 Dropbox File Download Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10515/info It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators. The application does not verify that th...
Sagem Routers Remote Reset Exploit
No description provided by source. !/usr/bin/perl Exploit Title: Sagem routers Remote Reset Exploit Date: 04/03/2010 Author: AlpHaNiX Software Link: null Version: Sagem Routers F@ST 1200/1240/1400/1400W/1500/1500-WG/2404 Tested on: Sagem F@ST 2404 Code : use HTTP::Request; use HTTP::Headers; use...
phpBB Security <= 1.0.1 (php_security.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip...
CASTOR <= 1.1.1 (lib/rs.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CASTOR = 1.1.1 Remote Command Execution Vulnerability Risk : High Remote Code Execution Url: svn.gna.org/svn/castor/trunk Exploit: http://www.site.com/path/lib/rs.php?rootpath=EvilScript coded and f0und3d by Kw3RLn ciriboflacsATYaHOo.com Romanian...
phpBB Module XS-Mod 2.3.1 - Local File Inclusion Vulnerability
No description provided by source. ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...
Gravity Board X 2.0 BETA (Public Release 3) - SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit code use LWP::Simple; pri...
7Shop <= 1.1 - Remote Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . .php; int.. yes i know PU! print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + 7Shop = 1.1 Remote Arbitrary File Upload + + Content-Ty...
XOOPS <= 2.0.11 xmlrpc.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Xoops = 2.0.11 xmlrpc.php sql injection exploit by RST/GHC based on http://www.gulftech.org/?node=research&articleid=00086-06292005 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru example: r57xoops.pl -u http://www.xoops2.ru/xmlrpc.php ...