5817 matches found
joomlajmovies-sql.txt
!/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ----------------------------------------------------------- Note: In lulz we trust :O...
Joomla! Component JMovies 1.1 - id SQL Injection
Joomla! Component JMovies 1.1 - id SQL Injection !/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ---------------------------------------------------------...
Joomla! Component JMovies 1.1 - 'id' SQL Injection
!/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ----------------------------------------------------------- Note: In lulz we trust :O...
Hack online MD5 website to collect-bug warning-the black bar safety net
| --- In addition to http://www. cmd5. com/, you can get to the next try MD5 Reverse Lookup http://linardy.com/md5.php Digest-MD5-Reverse-1.3 http://search.cpan.org/blwood/Digest-MD5-Reverse-1.3/ the md5 hash search http://www.hashchecker.com/index.php?sls=searchhash mmkey http://www.mmkey.com/md...
WordPress XSS vulnerability in RSS Feed Generator
===== noXSS.org Security Advisory ====== Advisory: WordPress XSS vulnerability in RSS Feed Generator Author: Jeremias Reith [email protected] Published: 2008/11/25 Affected: WordPress 2.6.5 Summary ======= WordPress prior to v2.6.3 fails to sanitize the Host header variable correctly when generating R...
SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...
SlimCMS 1.0.0 - edit.php SQL Injection
SlimCMS 1.0.0 - edit.php SQL Injection !/usr/bin/perl =starting -------------------------------------------------------- SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...
USN-663-1: system-tools-backends regression
It was discovered that passwords changed or new users created via the "Users and Groups" tool were created with 3DES hashing. This reduced the security of stored user passwords, and was a regression from the correct MD5 hashing. This update fixes the problem; future password changes will correct...
Article Publisher PRO 1.5 Insecure Cookie Handling Vulnerability
No description provided by source. Article Publisher PRO Insecure Cookie Handling Vulnerability version: 1.5 ---------------------------------------------------------- Discovered By: ZoRLu Date: 01.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...
e107easyshop-sql.txt
!/usr/bin/perl ------------------------------------------------------------ e107 Plugin EasyShop Remote Blind SQL Injection Exploit By StAkeRathotmaildotit Dork allinurl: e107plugins/easyshop/easyshop.php Example http://www.clan-designs.co.uk easyshop/easyshop.php?choosecategory=1&categoryid= or...
e107 Plugin EasyShop (category_id) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ------------------------------------------------------------ e107 Plugin EasyShop Remote Blind SQL Injection Exploit By StAkeRathotmaildotit Dork allinurl: e107plugins/easyshop/easyshop.php Example http://www.clan-designs.co.uk...
e107 Plugin EasyShop - category_id Blind SQL Injection
e107 Plugin EasyShop - categoryid Blind SQL Injection !/usr/bin/perl ------------------------------------------------------------ e107 Plugin EasyShop Remote Blind SQL Injection Exploit By StAkeRathotmaildotit Dork allinurl: e107plugins/easyshop/easyshop.php Example http://www.clan-designs.co.uk...
动力(My Powe)SQL注射漏洞
就是当用％20and%201=1返回如下： 错误信息 产生错误的可能原因：· 请指定文章ID 返回上一页 当用%20and%201=2返回如下： 错误信息 产生错误的可能原因： 你要找的文章不存在，或者已经被管理员删除！ 返回上一页 进行SQL注射 动力My Power3.6版 下载官方最新补丁http://www.asp163.net !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from...
Let you become the ASP Trojan master-vulnerability warning-the black bar safety net
Name: how to make a picture of the ASP Trojan can display pictures Built an asp file, the content of!-- of i nclude file="ating.jpg"--找 一 个 正常 图片 ating.jpg, insert the word Trojan,such as the ice Fox, with ultraedit to hex compiled, insert a picture, to run a successful, but also to search%and %...
CMME Multiple Information disclosure vulnerabilities
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CMME Multiple Information disclosure vulnerabilities Vendor: http://cmme.oesterholt.net Bug: Information Disclosure Vulnerable Version: 1.19 prior versions also may be affected Exploitation: Remote with browser Exploi...
ADN Forum <= 1.0b Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------- ADN Forum = 1.0b Blind SQL Injection Exploit Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 01/10/2008 Download: http://sourceforge.net/projects/adnforum/...
pilotgroup-sql.txt
--==+================================================================================+==-- --==+ Pilot Online Training Solution Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==--...
Pilot Group eTraining (news_read.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Pilot Group eTraining newsread.php id SQL Injection Vulnerability ====================================================================...
Apple Mac OS X Java Applet HMAC供给器处理远程代码执行漏洞
BUGTRAQ ID: 31379 CVE ID：CVE-2008-3637 CNCVE ID：CNCVE-20083637 Apple Mac OS X是一款商业性质的操作系统。 Apple Mac OS X Java Applet HMAC供给器使用未初始化变量，远程攻击者可以利用漏洞以应用程序上下文执行任意代码。 基于HASH的消息验证代码HMAC供给器用于生成MD5和SHA-A HASH，其中存在一个错误检查可导致使用未初始化变量。构建恶意的Java applet，诱使用户访问，可导致任意代码执行。 Apple Mac OS X Server 10.5.5 Apple Mac O...
[slackware-security] seamonkey
New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. More details about the issues may be found here: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.1 ChangeLog:...