48 matches found
pbd-exec.txt
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont=...
Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
No description provided by source. // Exploit Name: Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zaprasza...
Php Blue Dragon CMS 3.0.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Php Blue Dragon CMS 3.0.0 Remote SQL Injection Exploit ====================================================== 126 $result.=" ."; else $result.=" ".$string$i; if...
PHP blue dragon CMS 3.0.0 - Remote File Inclusion
PHP blue dragon CMS 3.0.0 - Remote File Inclusion // Exploit Name: Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL...
Php Blue Dragon CMS 3.0.0 Remote SQL Injection Exploit
No description provided by source. ? // Exploit Name: Php Blue Dragon CMS 3.0.0 Remote SQL Injection Exploit //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na...
Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit
No description provided by source. ?php // Exploit Name: Php Blue Dragon CMS 3.0.0 Code Execution Exploit //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na irc...
Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability ============================================================= // Exploit Name: Php Blue Dragon CMS 3.0.0 Remote Fil...
Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ======================================================= Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit ======================================================= 126 $result.=" ."; else $result.=" ".$string$i; if...
PHP Blue Dragon CMS 3.0.0 - SQL Injection
PHP Blue Dragon CMS 3.0.0 - SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...
PHP blue dragon CMS 3.0.0 - Remote File Inclusion
// Exploit Name: Php Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na irc! //Irc: irc.milw0rm.com:66...
CVE-2006-4961
SQL injection vulnerability in the GetModuleConfig function in publicincludes/pubkernel/pbdmodules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-4960
The CVE-2006-4960 entry describes a cross-site scripting (XSS) vulnerability in Php Blue Dragon 2.9.1 and earlier, exploitable via the m parameter. The issue is reflected in an error message generated by a failed SQL query, indicating that user-supplied input can be echoed back to the browser in ...
CVE-2006-4961
SQL injection vulnerability in the GetModuleConfig function in publicincludes/pubkernel/pbdmodules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...
CVE-2006-4962
A directory traversal vulnerability affects Php Blue Dragon ≤ 2.9.1 in pbd_engine.php. An attacker can use a .. sequence in the phpExt parameter to read and execute local files, demonstrated by executing PHP code in a log file. The CVE details do not specify affected patch versions beyond the lis...
CVE-2006-4961
CVE-2006-4961 affects Php Blue Dragon 2.9.1 and earlier. The vulnerability resides in the GetModuleConfig function inside public_includes/pub_kernel/pbd_modules.php, where the m parameter to index.php leads to a SQL injection that allows remote attackers to execute arbitrary SQL commands. The pro...
Php Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================= Php Blue Dragon CMS = 2.9.1 XSS/SQL Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on ? $devilteam = "...
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting SQL Injection Code Execution
PHP Blue Dragon CMS 2.9.1 - Cross-Site Scripting SQL Injection Code Execution !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + +...
Php Blue Dragon CMS <= 2.9.1 (XSS/SQL) Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote file containing malicio...
PHP Blue Dragon CMS 2.9.1 - 'template.php' File Inclusion
----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...