XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

Sql injection

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

SQL injection vulnerability in the DT Register comdtregister 2.2.3 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the eventId parameter in a payoptions action to index.php...

CVE-2008-3265

CVE-2008-3265 describes a SQL injection in the Joomla! DT Register component (com_dtregister) 2.2.3. The issue arises in the pay_options action to index.php, where the eventId parameter can be exploited by a remote attacker to execute arbitrary SQL commands. The vulnerability is caused by unsafe ...

Joomla Component DT Register Remote SQL injection Vulnerability

No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId...

Joomla! Component DT Register - SQL Injection

Joomla! Component DT Register - SQL Injection /---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister...

pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability

No description provided by source. ==================================================== | pSys v0.7.0 Alpha Multiple Remote File Include | works only with registerglobals = on | Founded By rXh RoMaNTiC-TeaM ==================================================== ! Discovered.: RoMaNcYxHaCkEr !...

Joomla Component com_dtregister SQL injection Vulnerability

Exploit for php platform in category web applications =============================================================== Joomla Component DT Register Remote SQL injection Vulnerability ===============================================================...

joomladtr-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...

Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability

No description provided by source. In The Name Of GOD ------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download...

WinZIP MIME Parsing Overflow Proof of Concept Exploit

No description provided by source. / Author: snooq Date: 14 April 2004 This is a PoC exploit for WinZip32 MIME Parsing Overflow bug reported by iDefense on 27 February 2004. The original advisory is found here: http://www.idefense.com/application/poi/display?id=76 This version is SP dependent bec...

Joomla! Component DT Register - SQL Injection

/---------------------------------------------------------------\ \ / / Joomla Component DT Register Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkeR Dork : inurl:comDTRegister eventId Vendor :...

Bilboblog 2.1 Multiple Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

bilboblog-multi.txt

------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...

bilboblog 2.1 - Multiple Vulnerabilities

------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link : http://www.tux-planet.fr/bilboblog-version-021-english-translation/ Vuln. types : Login Bypass -...

bilboblog 2.1 - Multiple Vulnerabilities

bilboblog 2.1 - Multiple Vulnerabilities ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution

Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...

Dedecms V5可执行文件上传漏洞

这是一个比较有意思的东西，但是成功利用起来并不容易，呵呵。 首先看configrglobals.php文件，摘的一段代码如下。这里作者本意是为了帮我们注册变量的，但是他却疏忽了我们不但能注册变量，还能覆盖一些变量。configrglobalsmagic.php也有同样的问题 ………………………………………………………………………… ifisarray$GET foreach$GET AS $key = $value $$key = $value; //可以覆盖任意变量 ………… …………………………………………………………………………...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...