PHP-Fusion 4.01 - SQL Injection Vulnerability

No description provided by source. Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL...

Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service

No description provided by source. !/usr/bin/python Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service Coded By: DrIDE Found By: Ma3sTr0-Dz Date: May 24, 2010 Download: http://sourceforge.net/projects/open-ftpd/ Tested: Windows 7 import random, socket, sys host = sys.argv1 buff = A:...

WordPress SermonBrowser Plugin 0.43 SQL Injection

No description provided by source. ?php if!$argv1 die Usage : php exploit.php site Example : php exploit.php http://site.com/wp/ ; printr Tilte......: WordPress SermonBrowser Plugin 0.43 SQL Injection Author.....: Ma3sTr0-Dz Date.......: 25-o4-2o11 Location ..: ALGERIA HoMe ......: wWw.sEc4EvEr.C...

cardinalCms 1.2 (fckeditor) Arbitrary File Upload Exploit.

No description provided by source. ========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location...

Unfixed XSS vulnerability at kooora.com

Security researcher Ma3str0-Dz, has submitted on 11/06/2011 a cross-site-scripting XSS vulnerability affecting kooora.com, which at the time of submission ranked 356 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.ecosse-peugeot.co.uk

Security researcher Ma3sTr0-Dz, has submitted on 21/05/2011 a cross-site-scripting XSS vulnerability affecting www.ecosse-peugeot.co.uk, which at the time of submission ranked 3767128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. ...

WordPress SermonBrowser Plugin 0.43 XSS / SQL Injection

alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$string ; for $i = 0; $i $y...

WordPress Plugin SermonBrowser 0.43 - SQL Injection

WordPress Plugin SermonBrowser 0.43 - SQL Injection alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$stri...

chillyCMS v1.2.1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

RunCMS Module (partners) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

PHPBoost 3.0 (gallery.php) File Upload Vulnerability

Exploit for php platform in category web applications Title : PHPBoost 3.0 gallery.php File Upload Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Upload Tested on :...

phportal_1.2 (gunaysoft.php) Remote File Include Vulnerability

No description provided by source. Tilte: phportal1.2 gunaysoft.php Remote File Include Vulnerability Author..................: Ma3sTr0-Dz Location ...............: ALGERIA Software ...............: phportal1.2 Impact..................: Remote Advisory ...............: exploit-db.com Site Softwar...

Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service

Exploit for windows platform in category dos / poc ================================================================ Open&Compact Ftp Server 1.2 Universal Pre-Auth Denial of Service ================================================================ !/usr/bin/python Open&Compact Ftp Server 1.2...

eWebEditor 1.x - WYSIWYG Arbitrary File Upload

eWebEditor 1.x - WYSIWYG Arbitrary File Upload ============================================================================= Tilte: eWebEditor v1.x WYSIWYG Remote File Upload . ============================================================================= Date....................: 22-05-2010...

eWebEditor 1.x Shell Upload

============================================================================= Tilte: eWebEditor v1.x WYSIWYG Remote File Upload . ============================================================================= Date....................: 22-05-2010 Author..................: Ma3sTr0-Dz Location...

DotNetNuke Remote File upload Vulnerability

Exploit for php platform in category web applications =========================================== DotNetNuke Remote File upload Vulnerability =========================================== Prodcut: DotNetNuke Home : www.DZ4All.cOm/Cc Vunlerability : Remote File upload Risk : High Dork :...

Open And Compact FTP Server 1.2 Denial Of Service

============================================================================= Tilte: Open&Compact Ftp Server 1.2 "PORT" command Remote Denial of Service. ============================================================================= Date....................: 22-05-2010 Author..................:...

cardinalCMS 1.2 - FCKeditor Arbitrary File Upload

cardinalCMS 1.2 - FCKeditor Arbitrary File Upload ========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-D...

cardinalCMS 1.2 - 'FCKeditor' Arbitrary File Upload

========================================================== cardinalCms 1.2 fckeditor Arbitrary File Upload Exploit. ========================================================== Date....................: 21-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software...

PHP-Fusion 4.01 - SQL Injection

PHP-Fusion 4.01 - SQL Injection Exploit Title: PHP-Fusion v4.01 SQL INJECTION Vulnerabilities Date: 17/05/2010 Author: Ma3sTr0-Dz Software Link: http://www.php-fusion.co.uk Version: 4.01 CVE : N/A Code : exploit code =======================================================PHP-Fusion v4.01 SQL...