391 matches found
CVE-2012-4257
Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...
Design/Logic Flaw
Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...
CVE-2012-4257
Yaqas Yet Another Question & Answer System 1.0 Alpha 1 allows remote attackers to obtain sensitive information via an invalid character in the PHPSESSID, which reveals the installation path in an error message...
freepost 0.1 r1 - Multiple Vulnerabilities
Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal , Habib, Djamal , Boukhors .. etc Exploit:...
freepost 0.1 r1 - Multiple Vulnerabilities
freepost 0.1 r1 - Multiple Vulnerabilities Exploit FreePost 0.1 R1 SQL Injection Date: June 6nd 2012 Author: ThE g0bL!N Version: 0.1 R1 Vendor Url: http://www.phpbrasil.com/script/dYRoLbwWuzR/freepost-01-r1 Tested on: Xp Service Pack 2 Greets To : Lider Pirata , Yassine Tablouche , Ilyes , Bilal ...
Strato Newsletter Manager Directory Traversal
STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...
STRATO NewsLetter Manager - Directory Traversal
STRATO Newsletter Manager is vulnerable against Directory Traversal Vendor: www.strato-cgi.de Google Dork: inurl:"newsletter.php.cgi" Exploit: http://server/cgi-bin/newsletter.php.cgi?PHPSESSID=af92ed633ae0d06d1e24d22520f709f7&action=nlshow&nl=../../../../../../../../../../../../../../etc/passwd...
Concrete CMS 5.5.2.1 Information Disclosure
TITLE ....... Concrete5.5.2.1 CMS information disclosure bug DATE ........ 22.04.2012 AUTOHR ...... http://hauntit.blogspot.com SOFT LINK ... http://www.concrete5.org/ VERSION ..... 5.5.2.1 TESTED ON ... LAMP ----------------------------------------------------------------------- 1. What is this?...
Yaqas CMS Alpha1 Information Disclosure
TITLE ....... Yaqas CMS Alpha1 Information Disclosure .................................... DATE ........ 25.03.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... YAQAS - Yet Another Question & Answer System @ google...
phpMyAdmin3 (pma3) - Remote Code Execution
!/usr/bin/env python coding=utf-8 pma3 - phpMyAdmin3 remote code execute exploit Author: wofeiwo Thx Superhei Tested on: 3.1.1, 3.2.1, 3.4.3 CVE: CVE-2011-2505, CVE-2011-2506 Date: 2011-07-08 Have fun, DO NOT USE IT TO DO BAD THING. Requirements: 1. "config" directory must created&writeable in pm...
IF-CMS 2.07 - Local File Inclusion (1)
!/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...
Simple Machines Forum 1.1.11 Session Fixation
======================================================================================== | Title : Simple Machines Forum 1.1.11 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.sec-war.com | Web Site : http://www.simplemachines.org/ | Dork : Powered by SMF...
Clip Bucket <= 1.7.1 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications =========================================================== Clip Bucket = 1.7.1 Insecure Cookie Handling Vulnerability =========================================================== || || | || o,7 || . o7 || q||| o\, : / /...
Clip Bucket 1.7.1 - Insecure Cookie Handling
|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...
The Recipe Script 5 Remote XSS Vulnerability
Exploit for unknown platform in category web applications ============================================ The Recipe Script 5 Remote XSS Vulnerability ============================================ + The Recipe Script version 5 Cookie Grabber Exploit + Discovered By ThE g0bL!N + Greetz : All my...
The Recipe Script 5 - Cross-Site Scripting
The Recipe Script 5 - Cross-Site Scripting + The Recipe Script version 5 Cookie Grabber Exploit + Discovered By ThE g0bL!N + Greetz : All my friends-Sec-r1z.com A good site if you want to learn : + Vendor:http://recipescript.com/ + Dork"script by RECIPE SCRIPT" PoC -- + Make 2 files and upload to...
Online Grades And Attendance 3.2.6 Blind SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ 'cc' Blind SQLi EXPLOIT | |--------------------------------------------------------------------------------------------| | | Online Grades & Attendance v-3.2.6 | |...
CVE-2008-6279
RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...
Design/Logic Flaw
RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...
CVE-2008-6279
RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...