EasyGallery 5.0tr - Multiple Vulnerabilities

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ EasyGallery "alert"JosS + Cross Site Scripting: Vuln File: index.php Exploit: http://localhost/PATH/staticpages/easygallery/index.php?help=about&q=XSS Example: %22+onmouseover=alert"JosS"+...

OSSIM 0.9.9rc5 (XSS/SQL Injection) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== OSSIM 0.9.9rc5 XSS/SQL Injection Multiple Remote Vulnerabilities ================================================================== Application: OSSIM http://www.ossim.net...

AuraCMS 1.62 - Multiple SQL Injections

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 1.62 Multiple Remote SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 1.62 Vendor : http://www.auracms.org/ ------------------------------------ Audit Oleh : NTOS-Team Loka...

CVE-2008-0798

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magicquotesgpc is disabled, allow remote attackers to read arbitrary files via a .. dot dot in the 1 ta parameter to artmedicindex.php, reached through index.php; and the 2 date parameter to artmedicprint.php...

allclub-lfi.txt

Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...

OpenSiteAdmin <= 0.9.1.1 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ OpenSiteAdmin = 0.9.1.1 Multiple File Inclusion Vulnerabilities ================================================================ Software Vulnerable: OpenSiteAdmin 0.9.1 BETA...

All Club CMS <= 0.0.1f index.php Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== All Club CMS pepepistola, musashi, patoruzu, ElvisPresley and sky Yashira.org-- PescaoDeth, Garcez, Crackneo, alexhk23 and all users of yashira as dapaf, elmanguan, etc...

phpShop <= 0.8.1 Remote SQL injection / Filter Bypass Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== phpShop $REQUEST'keyword', 'categoryid' = $REQUEST'categoryid', 'productid' = $REQUEST'productid', 'userid' = $REQUEST'userid', 'userinfoid' = $REQUEST'userinfoid', 'pag...

Sql injection

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 the mohit parameter to a inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via 2 the id parameter to...

DeluxeBB 1.1 XSS Vulnerabilitie

Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=scriptalert"XSS"/script...

deluxebb-xss.txt

Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=alert"XSS"...

CVE-2008-0254

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

tutorialcms102-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- TutorialCMS 1.02 Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x contact: ka0x01atgmail.com D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz from spain download...

eggBlog index.php eggblogpassword Parameter Cookie SQL Injection

The remote host is running eggBlog, a free PHP and MySQL blog software package. The version of eggBlog installed on the remote host fails to sanitize input to the 'eggblogpassword' cookie before using it in 'etc/header.php' to construct database queries. Provided PHP's 'magicquotesgpc' setting is...

TaskFreak! 0.6.1 - SQL Injection

| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection Description:...

SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit ========================================================== !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox;...

OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities

No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...

RunCMS Multiple Script lid Parameter SQL Injection

The version of this software installed on the remote host fails to sanitize user-supplied input to the 'lid' parameter of the 'modules/mydownloads/visit.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' and 'registerglobals' settings, an attacker may be able to...

DCP-Portal 6.11 - SQL Injection

!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...

webportalcms-passwd.txt

!/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date:...