PHP-Nuke SQL injection Module "Hadith" [cat]

R B T - 4 C R E W www.rbt-4.net ----------------------------------------------- AUTHOR : Lovebug PHP-Nuke Module "Hadith" cat Sql injection Original Advisory: http://www.rbt-4.net/forum/viewthread.php?forumid=51&threadid=3078 Exploit...

phpnukeseminars-lfi.txt

Aria-Security Team Persian Security Network http://Aria-Security.net ----------------------------------------------- Shoutz: AurA, Null, Kinglet, imm02tal And all our staff PHP-Nuke Module "seminar" Local FIle Inclusion Original Advisory: http://forum.aria-security.net/showthread.php?p=1591...

Authentication Capture: IMAP

This module provides a fake IMAP service that is designed to capture authentication credentials. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Authentication Capture: IMAP', 'Description' = %...

123flash-rfi.txt

Script : 123 Flash Chat Module for phpBB Discovered By : F10 Contact : [email protected] Site : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy , ercu145 , LupuS , m0sted , CyberGhost ... . From : Turkey Download : http://php.arsivimiz.com/indir.php?ID=996&sIslem=Indir The bugs are ...

Debian Security Advisory DSA 1505-1 (alsa-driver)

The remote host is missing an update to alsa-driver announced via advisory DSA 1505-1. OpenVAS Vulnerability Test $Id: deb15051.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1505-1 alsa-driver Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

pigyard art Gallery - Multiple Vulnerabilities

pigyard art Gallery - Multiple Vulnerabilities Pigyard Art Gallery Multiple Remote Vulnerabilities Script Buy Now : http://www.pigyardgallery.com/howtobuy.php author: ZoRLu home: www.yildirimordulari.org contact: [email protected] not: msn i ekleyipte aptal aptal konusmayýn yok ben seni...

PHP-Nuke Docum模块'artid' SQL注入漏洞

BUGTRAQ ID: 27912 CNCAN ID:CNCAN-2008022208 PHP-Nuke Docum模块是一款基于PHP的WEB应用程序。 PHP-Nuke Docum模块不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'artid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 PHP-Nuke Module Docum 目前没有详细解决方案提供： http://www.phpnuke.org/...

XOOPS Module prayerlist SQL Injection(cid)

XOOPS Module prayerlist SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules/prayerlist/index.php?pa"cid DORK 2 : allinurl: EXPLOIT :...

PHP-Nuke Module Downloads SQL Injection(sid)

PHP-Nuke Module Downloads SQL Injectionsid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: sid "modules php name Downloads" DORK 2 : allinurl: sid"dop=viewsdownload" EXPLOIT : admin =...

xoopsprayerlist-sql.txt

XOOPS Module prayerlist SQL Injectioncid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl:"modules/prayerlist/index.php?pa"cid DORK 2 : allinurl: EXPLOIT :...

PHP-Nuke Module Siir - id SQL Injection

PHP-Nuke Module Siir - id SQL Injection PHP-Nuke Siir SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: modules-php-name-Siir all modules.php?name=xx subject have secret print and and cant see op=print but cann- u...

PHP-Nuke Downloads Module - sid SQL Injection

PHP-Nuke Downloads Module - sid SQL Injection source: https://www.securityfocus.com/bid/27932/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

phpnukeinhalt-sql.txt

///////////////////////////////////////// Title : Php - Nuke Module Inhalt Sql Author : CrackersChild Mail : [email protected] Exploit : modules.php?name=Inhalt&sop=listpages&cid=-1//union//select//aid,2//from//nukeauthors/where%20admin%20-2...

PHP-Nuke Module Inhalt - cid SQL Injection

PHP-Nuke Module Inhalt - cid SQL Injection ///////////////////////////////////////// Title : Php - Nuke Module Inhalt Sql Author : CrackersChild Mail : [email protected] Exploit : modules.php?name=Inhalt&sop=listpages&cid=-1//union//select//aid,2//from//nukeauthors/where%20admin%20-2...

XOOPS Module section SQL Injection(articleid)

XOOPS Module section SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: modules/wfsection/print.php?articleid= EXPLOIT :...

XOOPS Module classifieds SQL Injection(cid)

XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example http://xxxx/modules/classifieds/index.php?pa=Adsview&cid=exploit EXPLOIT :...

XOOPS Module events SQL Injection

XOOPS Module events SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl :"modules/events/index.php?op=show" DORK 2 : allinurl: EXPLOIT :...

XOOPS Module classifieds (cid) Remote SQL Injection Vulnerability

No description provided by source. XOOPS Module classifieds SQL Injectioncid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: cid"modules/classifieds/index.php?pa=Adsview" example...

xoopsmodule-sql.txt

XOOPS Module section SQL Injectionarticleid AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: modules/wfsection/print.php?articleid= EXPLOIT :...

XOOPS 'events' Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/27890/info The XOOPS 'events' module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acce...