954 matches found
Solar Empire 2.9.1.1 - Blind SQL Injection / Hash Retrieve
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love Special Thanks to all the guys of milw0rm IRC channel for theyr help ------------------------------------------------------------------------ "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if...
RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve
RevokeBB 1.0 RC4 - Blind SQL Injection Hash Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love ------------------------------------------------------------- "; if $argc 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2...
RevokeBB <= 1.0 RC4 Blind SQL Injection / Hash Retrieve Exploit
Exploit for unknown platform in category web applications =============================================================== RevokeBB 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15...
livesup-admin.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...
AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...
AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft E-Friends = 4.21 Admin Session Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...
Alstrasoft Live Support 1.21 - Admin Credential Retrieve
Alstrasoft Live Support 1.21 - Admin Credential Retrieve !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost...
Alstrasoft Live Support 1.21 - Admin Credential Retrieve
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...
Alstrasoft e-Friends 4.21 - Admin Session Retrieve
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of template Example: php ".$argv0." localhost /efriend/"; die; errorreporting0; iniset"maxexecutiontime",0;...
InoutMailingListManager <= 3.1 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " InoutMailingListManager = 3.1 Command Execution Exploit + Login Retrieve + Advisory by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if...
CVE-2007-1823
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
CVE-2007-1822
Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
CVE-2007-1823
CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...
CVE-2007-1823
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
CVE-2007-1823: Undefined Security Weakness
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
CVE-2007-1822: Undefined Security Weakness
Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification CNID, aka Caller ID...
PT-2007-2302 · Local · Local Calendar System
Name of the Vulnerable Software and Affected Versions: local Calendar System version 1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the TEMPLATE DIR parameter to files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php,...
open NewsLetter 2.5 - Multiple Vulnerabilities (2)
!/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: None\r\n"; echo " |- Es: php ".$argv0." localhost /opnletter/ 1\r\n\r\n"; echo " 2 - Credential Retrieve\r\n"; echo " |- Related: None\r\n"; echo " |- Es: php...
BusyBox 1.01 - HTTPd Directory Traversal
source: https://www.securityfocus.com/bid/20067/info The httpd daemon of BusyBox is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the...
NX5Linkx 1.0 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/20010/info NX5Linkx is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. An attacker may be able to exploit these issues to modify the logic of SQL...