chernobiLe Portal 1.0 (default.asp) Remote SQL Injection Vulnerability

Title : chernobiLe Portal 1.0 default.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Not Free,Private Info : / Turk Script Eklememen konusunda guzelce uyarmistim,ukalaca tamam demistin Fakat hala birsey bulmus gibi bazi sitelerde bu raporlarin basligini aciyorsun.Urastigin...

Oracle 10g - SYS.KUPV$FT.ATTACH_JOB PL SQL Injection

Oracle 10g - SYS.KUPV$FT.ATTACHJOB PL SQL Injection / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - EXECUTECATALOGROLE - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA...

Oracle 10g - SYS.KUPW$WORKER.MAIN PL SQL Injection

Oracle 10g - SYS.KUPW$WORKER.MAIN PL SQL Injection / Exploit for Oracle10g R1 and R2 prior to CPU Oct 2006 Joxean Koret Privileges needed: - CREATE SESSION - CREATE PROCEDURE / select from userroleprivs ; CREATE OR REPLACE FUNCTION F1 RETURN NUMBER AUTHID CURRENTUSER IS PRAGMA...

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST !/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 ||...

ComVironment 4.0 - 'grab_globals.lib.php' Remote File Inclusion

/\ ComVironment 4.0 ========================================================= Published : 2007-01-18 Remote: Yes Site:http://switch.dl.sourceforge.net/sourceforge/comvironment/ Author: GolDM = Mahmoodali Contact: [email protected] ===================================================== ThanX=All My...

PHPMyphorum 1.5a - '/mep/frame.php' Remote File Inclusion

PHPMyphorum 1.5a Class: File Include Vulnerability Published 2007/1/17 Remote: Yes Critical Level : Dangerous Site: http://www.comscripts.com/scripts/php.phpmyphorum.1104.html Author: TheViper-hacker Contact: [email protected] file ; frame.php...

TLM CMS 1.1 - 'i-accueil.php?chemin' Remote File Inclusion

/\ Citations Aléatoires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali Contact: [email protected] ===================================================== ThanX =All My...

vp-asp shopping cart 6.09 - SQL Injection / Cross-Site Scripting

Title : VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://www.vpasp.com $$ : $49.00 - $350.00 - $495.00 SQL--------------------------------------------------------- http://target/path//shopgiftregsearch.asp?LoginLastname=SQL Example:...

AllMyLinks 0.5.0 - index.php Remote File Inclusion

AllMyLinks 0.5.0 - index.php Remote File Inclusion /\ AllMyLinks 0.5.0 ========================================================= Published : 2007-01-07 Remote: Yes Site: http://download.php-resource.net/AllMyLinks/AllMyLinks0.5.0.zip Author: GolDM Contact: [email protected]...

E-Smart Cart 1.0 - Product_ID SQL Injection

E-Smart Cart 1.0 - ProductID SQL Injection Title : E-SMARTCART 1.0 productid Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : ... $$ : $49.00 SQL---------------------------------------------------------...

RBlog 1.0 - admin.mdb Remote Password Disclosure

RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...

P-News 1.161.17 - user.dat Remote Password Disclosure

P-News 1.161.17 - user.dat Remote Password Disclosure P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and...

wywo inout board 1.0 - Multiple Vulnerabilities

wywo inout board 1.0 - Multiple Vulnerabilities Title : WYWO - InOut Board 1.0 Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://cybercoded.com $$ : 9.95 $ SQL--------------------------------------------------------- http://target/path/phonemessage.asp?num=SQL Example:...

Okul Merkezi Portal 1.0 - ataturk.php Remote File Inclusion

Okul Merkezi Portal 1.0 - ataturk.php Remote File Inclusion LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Okul Merkezi Portal v1.0 GoogLe Dork : ogrencimezunlar.php Script Download : http://www.okulmerkezi.com/omdemo/ Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The...

myPHPNuke Module My_eGallery 2.5.6 - basepath Remote File Inclusion

myPHPNuke Module MyeGallery 2.5.6 - basepath Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

Dragon Business Directory 3.01.12 - 'ID' SQL Injection

Title : Dragon Business Directory = V3.01.12 ID Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//busdetails.asp?ID=SQL Example:...

Burak Yilmaz Download Portal - down.asp SQL Injection

Burak Yilmaz Download Portal - down.asp SQL Injection LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Burak Y.lmaz Download Portal Script Download : http://maxiasp.com/scyorum.asp?scno=929 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZa...

cwmExplorer 1.0 - show_file Source Code Disclosure

cwmExplorer 1.0 - showfile Source Code Disclosure Title : cwmExplorer 1.0 showfile Source Code Disclosure Vulnerability Author : ajann Contact : : ERROR------------------------------------------------------ .... .. $datei = "dirs/".$d."/".$GETshowfile;...

Burak Yilmaz Download Portal - 'down.asp' SQL Injection

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Burak Y.lmaz Download Portal Script Download : http://maxiasp.com/scyorum.asp?scno=929 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX | Vulnerabl...

Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion

BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...