616 matches found
xeCMS <= 1.0.0 RC2 Insecure Cookie Handling Vulnerability
No description provided by source. -+================================================================================+- -+ xeCMS = 1.0.0 RC2 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...
makit Newsposter Script 3.0 - Remote SQL Injection Vulnerability
No description provided by source. Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...
Destiny Media Player 1.61 - PLS .M3U Buffer Overflow
No description provided by source. $Id: destinymediaplayer16.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
newsoffice 1.1 - Remote File Inclusion Vulnerability
No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : NewsOffice 1.1 Remote File Include Vulnerabilitiy Download From : http://www.newanz.com/applications/NewsOffice/?page=download Found By : RoMaNcYxHaCkEr...
PhShoutBox <= 1.5 (final) Insecure Cookie Handling Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ PhShoutBox = 1.5 final Insecure Cookie Handling Arbitrary Authentication +==--...
phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: PHP BP Team | | | | author: [email protected] | | homepage:...
Excel Viewer OCX 3.2 - Remote File Execution Exploit
No description provided by source. HTML ---------------------------------------------------------- br Excel Viewer OCX 3.2 Remote File execution exploit br ---------------------------------------------------------- br -----------------------------------br By Mountassif Moad a.k.a Stack...
PHP-Nuke 7.4 - Remote Privilege Escalation
No description provided by source. A demonstration exploit HTTP form is provided: form name=mantra method=POST action=http://www.sitewithphpnuke.com/admin.php pUSERNAME: input type=text name=addaid br NOME: input type=text name=addname br PASSWORD: input type=text name=addpwd br E-MAIL: input...
AnotherPHPBook (APB) 1.3.0 (Auth Bypass) - SQL Injection Vulnerability
No description provided by source. APBook 1.3.0 Login Bypass SQL Injection Vulnerability AUTHOR: n3w7u Download: www.clanscripte.net/main.php?content=download&do=dl&dlid=81 Dorks: inurl:apbook/index.php or AnotherPHPBook APB v.1.3.0 © 2001 by Stephan Baumeister zap Exploit:...
Estate Agent Manager <= 1.3 - (default.asp) Login Bypass Vulnerability
No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-13...
Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit
No description provided by source. !/usr/bin/perl Monster Top List = 1.4.2 remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://www.monstertoplist.com Exploit: http://site.com/path/sources/functions.php?rootpath=EvilScript coded and f0und3d by fluffybunny Romania...
Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
PHP <= 4.4.4/5.1.6 htmlentities() Local Buffer Overflow PoC
No description provided by source. ?php / Nick Kezhaya / / www.whitepaperclip.com / //instantiate a string $str1 = ; for$i=0; $i 64; $i++ $str1 .= toUTF977; //MUST start with 977 before bit-shifting htmlentities$str1, ENTNOQUOTES, UTF-8; //DoS here / htmlentities method automatically assumes it i...
LE.CMS <= 1.4 - Remote Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LE.CMS = 1.4 Remote Arbitrary File Upload Exploit - - - - - - Discovered && Coded By: t0pP8uZz - -...
WebCards <= 1.3 - Remote SQL Injection Vulnerability
No description provided by source. -+================================================================================+- -+ WebCards = 1.3 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Contact:...
Pre News Manager 1.0 - Remote SQL Injection Vulnerability
No description provided by source. ============================================== Pre News Manager v1.0 Remote SQL Injection ============================================== Found: Cyber-Security.org ============================================== Script site: http://www.preproject.com/news.asp...
Joomla Component Camelcitydb2 2.2 - SQL Injection Vulnerabilities
No description provided by source. Joomla Component Camelcitydb2 SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, urtan, warning, chs, redc00de - -=Kosova Hackers Group=- ScriptName: Joomla Component:...
FlashGameScript <= 1.7 (user) Remote SQL Injection Vulnerability
No description provided by source. FlashGameScript = 1.7 member.php$user SQL-Injection Exploit Vulnrability Discovered By: Xenduer77 ---July 7th, 2007 $user Is passed straight to the query without being filtered. SQL-INJECTION: For Version 1.7: -------...
compteur 2.0 - (param_editor.php) Remote File Include Vulnerability
No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...
AJ Auction <= 6.2.1 - (classifide_ad.php) SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ AJ Auction = 6.2.1 classifidead.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==...