EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

EggBlog 3.1.10 - Cross-Site Request Forgery Change Admin Password | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

Joomla! Component com_na_content 1.0 - Blind SQL Injection

Joomla! Component comnacontent 1.0 - Blind SQL Injection Joomla Component comnacontent 1.0 Blind SQL Injection Vuln Author: xoron Exploit: /index.php?option=comnacontent&task=view&id=1 having 1=0 /index.php?option=comnacontent&task=view&id=1 having 1=1 or...

StormBoard 1.0.1 - SQL Injection

StormBoard 1.0.1 - SQL Injection ============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection...

Joomla! Component com_allhotels - Blind SQL Injection

Joomla Component comallhotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ & http://www.leveltensolutions.net/spa/ DorK : inurl:index.php?option=comallhotels Demo :...

The Rat CMS Alpha 2 - Authentication Bypass

The Rat CMS Alpha 2 - Authentication Bypass --------------------------------- The Rat Cms Auth By Pass --------------------------------- Autore: x0r Email: [email protected] -------------------------------- Bug In: \login.php $sql = "SELECT userid FROM tblauthuser WHERE userid = '$userId' AND...

Joomla! Component live chat - SQL Injection Open Proxy

Joomla! Component live chat - SQL Injection Open Proxy Joomla Live Chat http://www.joompolitan.com/livechat.html Google Dork: allinurl:option=comlivechat author: jdc SQL Injections: administrator/components/comlivechat/getChat.php && administrator/components/comlivechat/getSavedChatRooms.php don'...

Tizag Countdown Creator 3 - Insecure Upload

remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

E.Z. Poll 2 - Authentication Bypass

E.Z. Poll 2 - Authentication Bypass Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

7Shop 1.1 - Arbitrary File Upload

7Shop 1.1 - Arbitrary File Upload !/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand1000 . ".php"; int.. yes i know PU! print Spoofing + + Discovered && Coded By: t0pP8uZz + + + + Contact IRC: irc.rizon.net sectalk + + Vendor not notified! Lat...

Vivvo CMS 3.4 - Multiple Vulnerabilities

Vivvo CMS 3.4 - Multiple Vulnerabilities !/usr/bin/perl Vivvo CMS Destroyer [email protected] By Xianur0 -------------CREDITS------------- http://milw0rm.com/exploits/4192 http://milw0rm.com/exploits/3326 http://milw0rm.com/exploits/2339 http://milw0rm.com/exploits/2337...

Hummingbird Deployment Wizard 2008 - Registry Values CreationChange

Hummingbird Deployment Wizard 2008 - Registry Values CreationChange ------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 DeployRun.dll Registry Values Creation/Change url: http://www.hummingbird.com Author: shinnai mail:...

FoT Video scripti 1.1b - oyun SQL Injection

FoT Video scripti 1.1b - oyun SQL Injection Author : By CrackersChild Contact: [email protected] Greetz : biyosecurity.com & milw0rm.com & tryag.cc & All My Friends Script : FoT Video scripti V1.1 Beta Exploit : For username you can read username on title...

5 star review - Cross-Site Scripting SQL Injection

5 star review - Cross-Site Scripting SQL Injection Viva IslaM Viva IslaM XSS / Remote SQL Injection Five Star Review recommend.php itemid http://review-script.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploites :- User Exploit...

blazedvd_bof.pl.txt

!/usr/bin/perl Title: BlazeDVD 5.0 PLF Playlist File Remote Buffer Overflow Exploit PoC Summary: BlazeDVD is leading powerful and easy-to-use DVD player software. It can provide superior video and audioDolby quality, together with other enhanced features:e.g. recording DVD,playback image and...

ABG Blocking Script 1.0a - abg_path Remote File Inclusion

ABG Blocking Script 1.0a - abgpath Remote File Inclusion ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com...

Mobius 1.4.4.1 - SQL Injection

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script site:...

PPMate PPMedia Class - ActiveX Control Buffer Overflow (PoC)

PPMate PPMedia Class - ActiveX Control Buffer Overflow PoC arg1=String10000, "A" target.StartURLarg1 milw0rm.com 2008-07-17...

PHPwebnews 0.2 MySQL Edition - id_kat SQL Injection

PHPwebnews 0.2 MySQL Edition - idkat SQL Injection / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , |...

CMS WebManager-Pro - Multiple SQL Injections

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/ Vuln:...

Microsoft Internet Explorer - Print Table of Links Cross-Zone Scripting

!-- Internet Explorer "Print Table of Links" Cross-Zone Scripting Vulnerability Author: Aviv Raff http://aviv.raffon.net/ Summary Internet Explorer is prone to a Cross-Zone Scripting vulnerability in its “Print Table of Links” feature. This feature allows users to add to a printed web page an...