coppermine-php.txt

!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...

Coppermine Photo Gallery 1.4.10 - 'xpl.php' SQL Injection

!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...

Vizayn Haber (haberdetay.asp id variable) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Vizayn Haber haberdetay.asp id variable SQL Injection Vulnerability ===================================================================== Vizayn Haber tr == tr SQL...

CVE-2006-5681

QuickTime for Java on Mac OS X 10.4 through 10.4.8, when used with Quartz Composer, allows remote attackers to obtain sensitive information screen images via a Java applet that accesses images that are being rendered by other embedded QuickTime objects...

Mono XSP 1.x2.0 - Source Code Information Disclosure

Mono XSP 1.x2.0 - Source Code Information Disclosure source: https://www.securityfocus.com/bid/21687/info XSP is prone to a source code information-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary...

Hacking tricks of talking about network intrusion to improve the method-vulnerability warning-the black bar safety net

Now you want to invade a site directly with the data server, open some ports, with those overflowing way to engage in the web server Station, presumably unlikely, if now also can use 1 4 3 3 can easily handle a server, then you will be able to buy lottery tickets went to the Oh. Now the...

Wabbit PHP Gallery 0.9 - Dir Directory Traversal

Wabbit PHP Gallery 0.9 - Dir Directory Traversal source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the...

Wabbit PHP Gallery 0.9 - 'Dir' Directory Traversal

source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the contents of arbitrary files in the context of the...

googleHack Lite-vulnerability warning-the black bar safety net

Look at the basic situation: infxx.com return some basic information site:xx.com returns all the information about the url link:xx.com returns all the station made the connection of the station site:xx.com filetype:txt find TXT file the other in turn within the push Find the background site:xx.co...

Easy File Sharing Web Server protection bypass

By using alternative NTFS-streams it's possible to retrieve protected data, including accounts and passwords...

Cruiseworks 1.09 - 'Cws.exe' Doc Directory Traversal

source: https://www.securityfocus.com/bid/20698/info Cruiseworks is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context...

CakePHP 1.1.7.3363 - Vendors.php Directory Traversal

CakePHP 1.1.7.3363 - Vendors.php Directory Traversal source: https://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...

A.I-Pifou 1.8 - Choix_langue.php Directory Traversal

A.I-Pifou 1.8 - Choixlangue.php Directory Traversal source: https://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from...

more.groupware 0.74 - new_calendarid SQL Injection

more.groupware 0.74 - newcalendarid SQL Injection ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo...

more.groupware <= 0.74 (new_calendarid) Remote SQL Injection Exploit

No description provided by source. ? errorreportingEERROR; function exploitinit if !extensionloaded'phpcurl' && !extensionloaded'curl' if !dl'curl.so' && !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function exploitheader echo...

EShoppingPro 1.0 - 'Search_Run.asp' SQL Injection

source: https://www.securityfocus.com/bid/20089/info EShoppingPro is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit this issue to modify the logic of SQL queries...

NX5Linkx 1.0 - Multiple SQL Injections

NX5Linkx 1.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/20010/info NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit these...

Cybozu Products - id Arbitrary File Retrieval

Cybozu Products - id Arbitrary File Retrieval Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files...

Cybozu Products (id) Arbitrary File Retrieval Vulnerability

Exploit for cgi platform in category web applications =========================================================== Cybozu Products id Arbitrary File Retrieval Vulnerability =========================================================== Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Che...

[Full-disclosure] [vuln.sg] Cybozu Products Arbitrary File Retrieval Vulnerability

vuln.sg Vulnerability Research Advisory Cybozu Products Arbitrary File Retrieval Vulnerability by Tan Chew Keong Release Date: 2006-08-28 Summary ------- A vulnerability has been found in Cybozu Products. When exploited, the vulnerability allows an authenticated user to retrieve arbitrary files...