Link Bid Script 1.5 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. + Link Bid Script 1.5 Multiple Remote SQL Injection + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Remote SQL Injection - Note : For PoC 2 you need administrative rights. Po...

Beatport Player 1.0.0.283 - (.M3U File) Local Buffer Overflow PoC

No description provided by source. Beatport Player 1.0.0.283 .M3U File Local Stack Overflow PoC Discovered by SirGod - www.mortal-team.net Error log : Logged at Friday, May 01, 2009 14:03:17 FileVersion: 1.0.0.283 ProductVersion: 1.0.0.0 Exception Code: 0xC0000005 Exception Addr: 0x001B:0x004317F...

Impleo Music Collection 2.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...

PastelCMS 0.8.0 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. + PastelCMS 0.8.0 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Download : http://pastel.pri.ee/?id=58 + Local File Inclusion PoC : http://127.0.0.1/path/?setlng=../../../../../../BOOTSECT.BAK%00 + SQL...

BandSite CMS 1.1.4 (members.php memid) SQL Injection Vulnerability

No description provided by source. + BandSite CMS 1.1.4 SQL/Upload Shell Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Remote SQL Injection - The script is full of SQLI bugs.This is one of them. - Vulnerable code in...

ClearBudget 0.6.1 - Insecure Cookie Handling / Local File Inclusion

ClearBudget v0.6.1 Insecure Cookie Handling / LFI + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + www.hellzone.info + www.anti-intruders.org + Dork : ClearBudget v0.6.1 + Homepage : http://clearbudget.douteaud.com/ + Insecure Cookie Handling PoC : javascript:document.cookie =...

JMweb - src Local File Inclusion

JMweb - src Local File Inclusion + JMweb MP3 src Multiple Local File Inclusion + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex Script Homepage: http://www.jesse-web.co.cc // + Download :...

CCMS 3.1 - skin Local File Inclusion

CCMS 3.1 - skin Local File Inclusion + CCMS 3.1 skin Multiple Local File Inclusion Vulnerabilities + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Download Script :...

CCMS 3.1 (skin) Multiple Local File Inclusion Vulnerabilities

No description provided by source. + CCMS 3.1 skin Multiple Local File Inclusion Vulnerabilities + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Download Script :...

buxto-cookie.txt

Bux.to Clone script Insecure Cookie Handling Vulnerability + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex + Download : http://depositfiles.com/files/6633532 + Dork : c SriptBux 2008 | Powered By ScriptBux...

Bux.to Clone Script - Insecure Cookie Handling

Bux.to Clone script Insecure Cookie Handling Vulnerability + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke,Codex + Download : http://depositfiles.com/files/6633532 + Dork : c SriptBux 2008 | Powered By ScriptBux...

linkbid-sql.txt

Link Bid Script 1.5 Multiple Remote SQL Injection + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Remote SQL Injection - Note : For PoC 2 you need administrative rights. PoC 1 :...

iscriptseasy-sql.txt

iScripts EasyIndex produid Remote SQL Injection + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Remote SQL Injection PoC : http://target/path/detaillist.php?produid=SQL Example :...

freephpvx-database.txt

Free PHP VX Guestbook 1.06 Arbitrary Backup Database + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Arbitrary Backup Database Follow the example and the database download will begin : dbnamedbbackup.sql PoC :...

Free PHP VX Guestbook 1.06 - Arbitrary Database Backup

Free PHP VX Guestbook 1.06 Arbitrary Backup Database + Discovered By SirGod + wWw.MorTal-TeaM.OrG + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke + Arbitrary Backup Database Follow the example and the database download will begin : dbnamedbbackup.sql PoC :...

Thickbox Gallery v2 (admins.php) Admin Data Disclosure Vulnerability

No description provided by source. + Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted...

Thickbox Gallery 2.0 - 'Admins.php' Admin Data Disclosure

Thickbox Gallery v2 Admin Data Disclosure + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN,kemrayz + Arbitrary Admin Data Disclosure - Go here and you will see the admin data login name + crypted password as MD5...

bandsitecms-xss.txt

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery

BandSite CMS 1.1.4 Arbitrary Download Database/XSS/CSRF + Discovered By SirGod + www.mortal-team.org + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,MesSiAH,xZu,HrN + Arbitrary Download Database Go to http://localhost/Path/adminpanel/phpmydump.php and the download will begin database.sql . +...

syzygycms-lfi.txt

syzygyCMS 0.3 Local File Inclusion + Discovered By SirGod + www.mortal-team.com + Greetz : E.M.I.N.E.M, Ras ,Puscasmarin + also ToxicBlood,MesSiAH,xZu Example : http://localhost/x/index.php?page=../../../autoexec.bat This will open autoexec.bat...