Joomla! 1.5.12 - Connect Back

!/usr/bin/php . TITLE: Joomla 1.5.12 connect back exploit AUTHOR: Nikola Petrov [email protected] VERSION: 1.0 LICENSE: GNU General Public License Platform: Joomla 1.5.12 Vulnerabilities discovery and implementation: Nikola Petrov [email protected] Date: 27.08.2009 Joomla 1.5.12 suffers from...

DeluxeBB存在多个安全漏洞

Bugraq ID: 37448 CVE ID：CVE-2009-4465 CVE-2009-4466 CVE-2009-4467 CVE-2009-4468 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB存在多个输入验证问题，远程攻击者可以利用漏洞进行跨站脚本，验证绕过和安全绕过等攻击。 具体漏洞如下： -部分管理控制面板文件不受访问保护。 -部分日志文件不受访问保护。 -在用户注册过程之后，简单的发送特殊链接，可绕过邮件注册校验。 -通过访问邮件列表字段的末页获得USERID -存在路径泄漏问题。 DeluxeBB = 1.3 目前没有解决方案提供：...

Erolife AjxGaleri VT - Database Disclosure

Erolife AjxGaleri VT - Database Disclosure ============================================================================== » Note : Mutlu Yillar Millettt ============================================================================== » Erolife AjxGaleri VT Database Disclosure Vulnerability...

CMS-DB 0.7.13 Cross Site Scripting

view source print? Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS: user=USERNAME&pass=PASSWORD&repeat=PASSWORD&pages=on&files=on&includes=on&template=on&gbook=on&blog=on&stats=on&button=Save -Delete user:...

QuickEStore 7.9 SQL Injection

======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

My Book World Edition NAS multiple vulnerability

Exploit for unknown platform in category web applications ================================================ My Book World Edition NAS multiple vulnerability ================================================ Exploit Title: My Book World Edition NAS multiple vulnerability Date: 20091230 Author:...

QuickEStore v.7.9 SQL Injection and Path Diclosure Download

Exploit for unknown platform in category web applications ========================================================================= QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability =========================================================================...

QuickEStore 7.9 - SQL Injection / Full Path Disclosure Download

======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

QuickEStore v.7.9 SQL Injection and Path Diclosure Download Vulnerability

No description provided by source. ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 -...

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download

QuickEStore 7.9 - SQL Injection Full Path Disclosure Download ======================================================================================== | Title : QuickEStore v.7.9 SQLInjection and Path Diclosure Download Vulnerability| | Author : indoushka | | email : [email protected] | | Hom...

cms -db <= v0.7.13 Multiple Vulnerabilities

Exploit for unknown platform in category web applications =========================================== cms -db URL: /cms/admin/newuser.php PARAMS: user=USERNAME&pass=PASSWORD&repeat=PASSWORD&pages=on&files=on&includes=on&template=on&gbook=on&blog=on&stats=on&button=Save -Delete user: USR:...

cms -db &lt;= v0.7.13 Multiple Vulnerabilities

No description provided by source. Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db = v0.7.13 CSRF -Add super-user: POST URL: /cms/admin/newuser.php PARAMS: POST...

cms -db 0.7.13 - Multiple Vulnerabilities

Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS: user=USERNAME&pass=PASSWORD&repeat=PASSWORD&pages=on&files=on&includes=on&template=on&gbook=on&blog=on&stats=on&button=Save -Delete user: USR:...

cms -db 0.7.13 - Multiple Vulnerabilities

cms -db 0.7.13 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2Gmail.com Software Link: http://cms-db.de/download Version: cms -db URL: /cms/admin/newuser.php PARAMS:...

Kayako SupportSuite version 3.60.04

Product Kayako SupportSuite version 3.60.04 Url http://www.kayako.com/solutions/supportsuite/ Path Disclosure http://supportsite/rss/index.php?m=tickets&a=view&group=default Fatal error: view action is not registered in includesfunctions.php on line 754 P.S. Только если не давится вывод ошибок Cr...

webMathematica XSS Vulnerability

No description provided by source. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the "webMathematica" folder: http://www.example.com/webMathematica/MSP\scriptalert'a'/scrip...

webMathematica Cross Site Scripting

Hi list I tried to follow the RainForest Puppy Policy, but Wolfram didn't respond to my email within 5 days. In some installations, the MSP script of webMathematica is vulnerable to reflected XSS. Just insert a backslash after the script name MSP, which is normally located under the...

DeluxeBB <= 1.3 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================== DeluxeBB = 1.3 Multiple Vulnerabilities ======================================== Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/...

DeluxeBB 1.3 - Multiple Vulnerabilities

DeluxeBB 1.3 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...

PHP Open Chat 3.0.2 Cross Site Scripting

PHPOPENCHAT 3.0.2 Xss AND/OR Full Path Disclosure 1.- Preview This web APP is Vulnerable to xss in its instalation file but you can misconfigurate all the code with this bug also, you must see to understand... 2.- Vulnerable Code function databasesetup if isset$POST'formdata' $host = string...