fuzzylime cms 3.01 Remote Command Execution Exploit

Exploit for unknown platform in category web applications =================================================== fuzzylime cms 3.01 Remote Command Execution Exploit =================================================== !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams DESCRIPTION...

CVE-2008-2996

GBX 2.0 Beta (Gravity Board X) has multiple SQL injection vulnerabilities in index.php. Specifically, two parameters are exploitable: searchquery in getsearch and board_id in viewboard, and these issues occur when magic_quotes_gpc is disabled. The CVE-2008-2996 entry documents remote execution of...

Wordtrans-web远程任意Shell命令注入漏洞

BUGTRAQ ID: 30027 CNCAN ID：CNCAN-2008070202 wordtrans-web是一款基于Web的多语言字典查询工具。 wordtrans-web存在输入验证问题，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。...

Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

faname10-sql.txt

netVigilance Security Advisory 42 Fa Name version 1.0 SQL Injection Vulnerability Description: Fa Name http://webscripts.softpedia.com/script/Content-Management/Fa-Name-41229.html is useful portal CMS for .name websites. You can have a simple portal but useful one for you domain names and by usei...

psys070-sql.txt

'/ -.- ---------------------oOO------OOo-------------------- | pSys v0.7.0 Alpha chatbox.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | -------------------------------------------------------- ! Discovered.: DNX ! Vendor.....: http://www.powie.de ! Detected...:...

BareNuked CMS 1.1.0 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================ BareNuked CMS Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

faname10-xss.txt

netVigilance Security Advisory 43 Fa Name version 1.0 Multiple XSS Attack Vulnerabilities Description: Fa Name http://webscripts.softpedia.com/script/Content-Management/Fa-Name-41229.html is useful portal CMS for .name websites. You can have a simple portal but useful one for you domain names and...

CVE-2008-2916

Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cid parameter to showcategory.php and the 2 id parameter to software-description.php...

Directory traversal

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

pSys 0.7.0 Alpha - chatbox.php SQL Injection

pSys 0.7.0 Alpha - chatbox.php SQL Injection '/ -.- ---------------------oOO------OOo-------------------- | pSys v0.7.0 Alpha chatbox.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | -------------------------------------------------------- ! Discovered.: DNX !...

pSys v0.7.0 Alpha (chatbox.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== pSys v0.7.0 Alpha chatbox.php Remote SQL Injection Vulnerability ================================================================== '/ -.-...

CVE-2008-2813

Directory traversal vulnerability in index.php in WallCity-Server Shoutcast Admin Panel 2.0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2008-2754

SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter...

CVE-2008-2770

SQL injection vulnerability in index.php in MycroCMS 0.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the entryid parameter...

WebChamado 1.1 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================ WebChamado 1.1 Arbitrary Add Admin Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

WebChamado 1.1 Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ========================================== WebChamado 1.1 Arbitrary Add Admin Exploit ========================================== !/usr/bin/perl ============================================ WebChamado 1.1 Arbitrary Add Admin Exploit...

CVE-2008-2678

Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 code parameter in a confirmdata action to edit1.php and the 2 id parameter to viewmore.php...

CVE-2008-2637

Multiple cross-site scripting XSS vulnerabilities in F5 FirePass SSL VPN 6.0.2 hotfix 3, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via quotes in 1 the cssexceptions parameter in vdesk/admincon/webyfiers.php and 2 the sqlmatchscope parameter in...

revokebbrc11-sql.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...