ZonPHP 2.25 - Remote Code Execution

Exploit Title: ZonPHP V2.25 RCE Vulnerability Google Dork: intext:"Made by SLAPER" Date: 21-10-2013 Exploit Author: Halim Cruzito Vendor Homepage: http://www.slaper.be Software Link: http://www.slaper.be/zonPHPv225.zip Version: v2.25 Tested on: Windows 7 PoC: "; $headers = array"User-Agent:...

ZonPHP V2.25 Remote Code Execute Vulnerability

Exploit for php platform in category web applications "; $headers = array"User-Agent: Mozilla/5.0 Windows NT 6.0; WOW64; rv:24.0 Gecko/20100101 Firefox/24.0", "Content-Type: text/plain"; $rc = curlinit; curlsetopt$rc, CURLOPTURL, $url.$path.$filename; curlsetopt$rc, CURLOPTHTTPHEADER, $headers;...

WebTester 5.x - Multiple Vulnerabilities

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester 5.x Multiple Vulnerabilities

WebTester 5.x Multiple Vulnerabilities suffer from SQL Injection Vulnerability, Arbitrary File Upload Vulnerability, PHPInfo Disclosure and Leftover install.php File. ========================================================================================== WebTester 5.x Multiple Vulnerabilities...

WebTester 5.x - Multiple Vulnerabilities

WebTester 5.x - Multiple Vulnerabilities ========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester 5.x SQL Injection / File Upload / Disclosure

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities

Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streami...

Ajax PHP Penny Auction 1.x 2.x - Multiple Vulnerabilities

Ajax PHP Penny Auction 1.x 2.x multiple Vulnerabilities Found by : Taha Hunter Info : Ajax PHP Penny Auction is one of the most proven and reliable Penny Auction software options available on the market. Based on a proprietary AJAX Streaming Engine which has four years of refinement and debugging...

CVE-2013-2744

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...

Default configuration

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...

CVE-2013-2744

CVE-2013-2744 affects WordPress BackupBuddy plugin, version 2.2.25, via importbuddy.php. The vulnerability allows remote attackers to disclose configuration information by triggering a step 0 phpinfo action that calls phpinfo. Impact is information disclosure of configuration data; no exploit det...

CVE-2013-2744

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function...

WordPress BackupBuddy Plugin <= 2.2.25 - Sensitive Data Exposure

This vulnerability is in importbuddy.php. It allows remote attackers to obtain configuration information via a step 0 phpinfo action. Solution Update the plugin...

Backupbuddy 2.2.4 Sensitive Data Exposure

Backupbuddy - sensitive data exposure in importbuddy.php "the premiere WordPress backup plugin to backup, restore and move WordPress" http://ithemes.com/purchase/backupbuddy/ known versions affected: v1.3.4, v2.1.4, v2.2.25, v2.2.28, v2.2.4, likely other versions also impact: access to wordpress...

SiteGo Local File Inclusion / Cross Site Scripting Vulnerabilities

SiteGo suffers from cross site scripting and local file inclusion vulnerabilities. Exploit Title: SiteGo Multiple Vulnerabilities Date: 02/07/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://site-go.com/ Software Link:...

ezStats2 For Playstation Network 1.10 Local File Inclusion

ezStats2 for Playstation Network version 1.10 suffers from a local file inclusion vulnerability. Exploit Title: ezStats2 for Playstation Network v1.10 Local File Inclusion Vulnerability Date: 02/05/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link:...

ezStats For Battlefield 3 0.91 XSS / Local File Inclusion

ezStats for Battlefield 3 version 0.91 suffers from cross site scripting and local file inclusion vulnerabilities. Exploit Title: ezStats for Battlefield 3 v0.91 Multiple Vulnerabilities Date: 02/05/2013 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link:...

ezStats For Battlefield 3 0.91 XSS / Local File Inclusion

Exploit Title: ezStats for Battlefield 3 v0.91 Multiple Vulnerabilities Date: 02/05/2013 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.ezstats.org/ Software Link: http://ezstats.googlecode.com/files/ezStats2BF3v0.91.zip Tested on:...

Wordpress plugin wp-royal-gallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Wordpress plugins wp-powerplaygallery Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...