2192 matches found
Nuked-klaN 1.7.6 - Remote Code Execution
Nuked-klaN 1.7.6 - Remote Code Execution Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file require the PhpSploit class. $xpl = new phpsploit; $url = 'http://localhost/nk/'; url $prx = ''; proxy : $pra = ''; basic...
RunCMS 1.5.2 - debug_show.php SQL Injection
RunCMS 1.5.2 - debugshow.php SQL Injection no authentication is performed to run showfiles and showqueries functions, look at this now in /class/debug/debug.php: ... function showqueries$executedqueries, $sorted=0 global $db; $executedqueries = unserializeurldecode$executedqueries; if $sorted == ...
Papoo 3.02 (kontakt menuid) Remote SQL Injection Exploit
No description provided by source. ? / Autor: Kacper Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. //dork: \"Help Contact Imprint Sitemap\" | \"powered by papoo\" | \"powered...
PunBB 1.2.14 - Remote Code Execution
!/usr/bin/php URL: http://www.acid-root.new.fr/ ----------------------------------------------------------------------- Usage: $argv0 -url -usr -pwd Options Params: -url For example http://victim.com/punBB/ -usr User account 1 post at least -pwd Password account Options: -uid Admin id default=2...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...
PHP read_file safe_mode protection bypass
It's possible to bypass protection by using php://../../ prefix to filename...
Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...
Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board 2.x usergroups.php Remote SQL Injection Exploit ======================================================================= !/usr/bin/perl Woltlab...
NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nsbypass.php Blind SQL Injection Exploit ============================================================== !/usr/bin/php -victim Opts Options: -isadmin Is the...
F3Site <= 2.1 Remote Code Execution Exploit
Exploit for unknown platform in category web applications =========================================== F3Site = 2.1 Remote Code Execution Exploit =========================================== ? // //Kacper & str0ke Settings $exploitname = "F3Site = 2.1 Remote Code Execution Exploit"; $scriptname =...
PHP Safe Mod protection bypass
It's possible to traverse working directory protection by using writing mode srpath://../ file prefix for fopen...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 2
No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew [email protected] should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better regex,raw cook...
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (2)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 2 !/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better...
CVE-2007-0262
WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...
Design/Logic Flaw
WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...
CVE-2007-0262
WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...
CVE-2007-0262
WordPress 2.0.6, and 2.1Alpha 3 SVN:4662, does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as th...
wordpress vulnerability nessus scan script-vulnerability warning-the black bar safety net
Boss, ban wrote, it seems uncomplicated to now seems to only scan the root directory C Bug. Center. Team h4kb4nBCT [email protected] 2007-01-14 1 5:4 0 WordPress Full Path disclosure and disclosure of Table Prefix Weakness ifdescription scriptid1 1 1 1 1; scriptversion"$Revision: All Version $";...
Wordpress disclosure of Table Prefix Weakness
Wordpress Full Path disclosure and disclosure of Table Prefix Weakness Description: Affected system: WordPress 2.1Alpha 3SVN:4662 WordPress =2.0.6 xy7 has discovered a weakness in WordPress, which can be exploited by malicious people to disclose SQL information and Wordpress Full Path. The proble...
CVE-2006-6222
Stack-based buffer overflow in the NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix...