1850 matches found
Video Script ASP Database Disclosure
!/usr/bin/perl -w Video Script ASP Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: www.sec4ever.com Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel special thanks to : r0073r inj3ct0r.com L0rd CruSad3r MaYur MA1201 KeDar Soni...
UblogReload 1.0.5 Database Disclosure Exploit
Exploit for asp platform in category web applications ============================================= UblogReload 1.0.5 Database Disclosure Exploit ============================================= !/usr/bin/perl -w UblogReload 1.0.5 Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010...
Gateway Portal Remote Database Disclosure Exploit
Exploit for php platform in category web applications ================================================= Gateway Portal Remote Database Disclosure Exploit ================================================= Author : KnocKout Thankz : DaiMon Contact : email protected Script : Gateway Portal Download ...
Anasayfam Portal 2010 Remote Database Disclosure Exploit
Exploit for php platform in category web applications ======================================================== Anasayfam Portal 2010 Remote Database Disclosure Exploit ======================================================== !/usr/bin/perl -w Anasayfam Portal 2010 / Database Disclosure Exploit...
PHP Live 3.3 Remote SQL Injection Exploit
Exploit for php platform in category web applications ========================================= PHP Live 3.3 Remote SQL Injection Exploit ========================================= !/usr/bin/perl -w Exploit Title: PHP Live 3.3 Date: 01/08/2010 Author: TA4G - email protected Vendor:...
MAYASAN PORTAL V 1.0 / V 2.0 Database Disclosure Exploit
Exploit for php platform in category web applications ======================================================== MAYASAN PORTAL V 1.0 / V 2.0 Database Disclosure Exploit ======================================================== !/usr/bin/perl -w MAYASAN PORTAL V 1.0 / V 2.0 Database Disclosure Explo...
PunBB 1.3.x / Pun_PM 1.2.6 Blind SQL Injection
!/usr/bin/perl 0-Day PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid, m.status as status, u.username as username, m.subject as subject, m.body as body', 'FROM' =...
PunBB <= 1.3.4 Pun_PM <= v1.2.6 Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ================================================================= PunBB 526 function punpmeditmessage global $forumdb, $forumuser, $langpunpm; $errors = array; // Verify input data $query = array 'SELECT' = 'm.id as id, m.senderid as senderid,...
PunBB <= 1.3.4 and Pun_PM <= v1.2.6 Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB = 1.3. Package: PunPM = v1.2.6 Remote Blind SQL Injection Exploit Author/s: Dante90, WaRWolFz Crew Created: 2009.07.30 after 0 days the bug was discovered. Crew Members: 4lasthor, Andryxxx, Cod3, Gho5t, HeRtZ, N.o.3.X, RingZero,...
PHP-Nuke 8.1.0.3.5b Command Execution
PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; my $request = LWP::UserAgent-new; $request-agent"Mozilla 5/0"; $request-cookiejar$cookies; END VARS sub...
PHP-Nuke 8.0 Remote Blind SQL Injection
PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to...
PHP-Nuke 8.0 -Web_Links Module - Blind SQL Injection
PHP-Nuke 8.0 -WebLinks Module - Blind SQL Injection PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print...
PHP-Nuke 8.1.0.3.5b (Your_Account Module) - Blind SQL Injection (Benchmark Mode)
PHP-Nuke 8.1.0.3.5b YourAccount Module - Blind SQL Injection Benchmark Mode PHP-Nuke new; my $average = 0; print "+ Calculating average load time may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: pe...
PHP-Nuke <= 8.0 (Web_Links Module) Remote Blind SQL Injection Exploit
Exploit for php platform in category web applications ===================================================================== PHP-Nuke new; my $average = 0; print "+ Calculating average load time it may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef;...
PHP-Nuke 8.1.0.3.5b - Remote Command Execution
PHP-Nuke 8.1.0.3.5b - Remote Command Execution PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use...
PHP-Nuke 8.1.0.3.5b - Remote Command Execution
PHP-Nuke REMEMBER TO ADD THE FINAL / TO THE HOSTNAME "; Change Here to Set your custom shell for example use system ; my $cookies = HTTP::Cookies-new; m...
PHP-Nuke 8.1.0.3.5b (Your_Account Module) - Blind SQL Injection (Benchmark Mode)
PHP-Nuke new; my $average = 0; print "+ Calculating average load time may take a while ...\n"; for my $i = 0; $i get$hosto; my $time = time; $average += int$time-$bef; return $average/5; sub Nuke::Usage print "+ Usage: perl nuke.pl \n"; print "+ the host must be the complete path to modules.php\n...
CVE-2010-2253
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...
DEBIAN-CVE-2010-2253
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...
Directory traversal
lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...