2199 matches found
Free Image Hosting 2.0 - 'AD_BODY_TEMP' Remote File Inclusion
Baslik :ImageUpload Script Remote File Inclusion Exploit Free Image Hosting 2.0 .ndir : http://free-php-scripts.net/scripts/ImageUpload.zip Bulan :CrackersChild Zay.flk : Exploit : www.site.com/imageuploadpath/login.php?ADBODYTEMP=Shell? :...
Code injection
Direct static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and earlier allows remote authenticated users to inject arbitrary PHP code into config.php via the 1 adminmail, 2 emotpatch, 3 login, 4 pass, and unspecified other parameters. NOTE: the provenance of this...
Guestbara 1.2 - Change Admin Login and Password
Guestbara = 1.2 Change admin login & password exploit by Kacper Admin Email Admin Name Admin Pass by Kacper for DEVIL TEAM script download: http://www.hotscripts.pl/produkt-3051.html Greetz @ll DEVIL TEAM milw0rm.com 2007-03-18...
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution
phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution source: https://www.securityfocus.com/bid/23008/info PhpStats is prone to a remote code-execution vulnerability because the application fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary PHP...
PHP-Stats 0.1.9.1b - ip SQL Injection
PHP-Stats 0.1.9.1b - ip SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
mAlbum v0.3 admin by default user/pass
mAlbum v0.3 admin by default user/pass By : sn0oPy Risk : high exploit : at http://www.target.ma/malbum/index.php when private images Login : login Password : pass after login, you can creat new admin account, delete it,... Dork : inurl:"malbum/" Default user/pass present here :...
VicFTPS < 5.0 (CWD) Remote Buffer Overflow Exploit PoC
No description provided by source. / VicFTPs Server CWD Remote Buffer Overflow Vulnerability DoS Proof of concept r0ut3r writ3r at gmail.com Thanks to: Marsu Marsupilamipowa at hotmail.fr for helping me out with this vulnerability. Greets Marsu, and Timq. Description: Sending a long argument to C...
CVE-2007-0926: Undefined Security Weakness
The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modified $mysql'pass' and $gbpass variables...
Unfixed XSS vulnerability at www.mix.fm
Security researcher DerickTham, has submitted on 02/12/2007 a cross-site-scripting XSS vulnerability affecting www.mix.fm, which at the time of submission ranked 99862 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...
Cross site scripting
Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...
CVE-2007-0660: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
No description provided by source. form name="userform" action="http://target/register.php" method="post" input name="step" type="hidden" value="regform" tr td class='tableh2' colspan='2'Account Information/td /tr tr td class='tableb' width='160'Username/td td class='tableb' /td /tr tr td...
Extcalendar 2 - profile.php Remote User Pass Change
Extcalendar 2 - profile.php Remote User Pass Change Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name Home page td class='t...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu 1.3 - index2.php Remote User Pass Change
ACGVannu 1.3 - index2.php Remote User Pass Change Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
Exploit for unknown platform in category web applications ================================================================== ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability ================================================================== Title : ACGVannu = 1.3 index2.php Remote...
ACGVannu <= 1.3 (index2.php) Remote User Pass Change Vulnerability
No description provided by source. Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
ACGVannu 1.3 - 'index2.php' Remote User Pass Change
Title : ACGVannu = 1.3 index2.php Remote User Pass Change Vulnerability Author : ajann Contact : : S.Page : http://acgv.free.fr $$ : Free REMOTE PASS CHANGE http://target/path//index2.php ID VARIABLE Example: ID=USER ID 167...
Easy File Sharing FTP Server PASS Command Overflow
The remote host appears to be using Easy File Sharing FTP Server, an FTP server for Windows. The version of Easy File Sharing FTP Server installed on the remote host contains a stack-based buffer overflow vulnerability that can be exploited by an unauthenticated attacker with a specially crafted...