Andy's PHP KnowledgeBase 0.95.4 - SQL Injection

------------------------------------------------------------------------ Software................Andy's PHP Knowledgebase Project 0.95.4 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.aphpkb.org/ Discovery Date..........3/27/2011 Test...

Discuz! v7. 2 injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Vulnerability analysis: 文件 ./manyou/sources/notice.php The relevant code: $appid = intval$GET'appid'; $db-query"DELETE FROM $tablepremyinvite WHERE appid='$appid' AND touid='$discuzuid'"; showmessage'manyou:done', 'userapp.php script=notice&action=invite'; elseif$option == 'deluserapp' $hash =...

Mini-CMS 1.0.1 SQL Injection

+--------------------------------------------------------------------------------------------------------------------+ +--------------------------------------------Mini-CMS 1.0.1 SQL inlection------------------------------------------+...

PHP Director 0.21 - SQL Into Outfile eval() Injection

PHP Director 0.21 - SQL Into Outfile eval Injection include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit-...

PHP Director 0.21 - SQL Into Outfile 'eval()' Injection

include include include include include include / Dork "Powered by PHP Director 0.2" | PHP Director 0.2.1 sql into outfile eval Injection Exploit | Exploit- index.php?cat=%27+UNION+SELECT+1,'lol',3,4,5,6,7,8,9,10,11,12,13,14,15+INTO+OUTFILE+'/var/www/ex.php'/ PHP.ini- Magic Quotes off Written- by...

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode (97 bytes)

Linux/x86 - Copy /etc/passwd to /tmp/outfile Shellcode 97 bytes. Shellcode exploit for Linuxx86 platform ;Description: Copy /etc/passwd to /tmp/outfile 97 bytes ;Shellcode:...

prozillafs-sql.txt

--==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

Prozilla Forum Service - forum SQL Injection

Prozilla Forum Service - forum SQL Injection --==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==--...

Prozilla Forum Service - 'forum' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

CVE-2007-4889

The CVE-2007-4889 entry relates to PHP’s MySQL extension in PHP 5.2.4 and earlier, where remote attackers could bypass safe_mode and open_basedir restrictions using MySQL functions (LOAD_FILE, INTO DUMPFILE, INTO OUTFILE). Affected component: PHP MySQL extension (versions

DEBIAN-CVE-2006-6169

Heap-based buffer overflow in the askoutfilename function in openfile.c for GnuPG gpg 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the makeprintablestring function to return a longer string than...

CVE-2006-6169

Heap-based buffer overflow in the askoutfilename function in openfile.c for GnuPG gpg 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the makeprintablestring function to return a longer string than...

Microsoft Internet Explorer - MDAC Remote Code Execution (MS06-014)

Microsoft Internet Explorer - MDAC Remote Code Execution MS06-014 !/bin/sh - "exec" "python" "-O" "$0" "$@" doc = """BL4CK - MS06-014 RDS.DataStore - Data Execution CVS-2006-0003 MS06-014 April 2006 this is a bit out-dated, but works very well Usage: ./bl4ckms06014.py...

phpBB 2.0.13 (admin_styles.php) Remote Command Execution Exploit

Exploit for linux platform in category remote exploits ================================================================ phpBB 2.0.13 adminstyles.php Remote Command Execution Exploit ================================================================ !/usr/bin/perl r57phpbbadmin2exec.pl phpBB...