4 matches found
Joomla Component Car Manager <= 1.1 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Joomla Component Car Manager = 1.1 Blind SQL Injection Exploit Coded by : ajann Author : ajann Dork : "index.php?option=comresman" Contact : : S.Page : http://www.webformatique.net $$ : .39.99 .. : ajann,Turkey use IO::Socket; if@ARGV...
PHP Easy Download admin/save.php moreinfo Parameter Code Injection
The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially crafted value, an attacker can store and execute code at the privilege level of the remote web server. %NASLMINLEVEL...
CVE-2006-6255: Undefined Security Weakness
Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the filename parameter and code in the moreinfo...
aspired2poll-10.txt
!/usr/bin/perl Script Name: AspPired2 Poll newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+ Connection failed...\n"; print $socket "GET $target\n"; print $socket "Host: $server\n"; print $socket "Accept: /\n"; print $socket "Connection: close\n\n"; print "+ Connected!...\n";...