E-ShopSystem SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Zinf Audio Player 2.2.1 - .pls Stack Overflow (PoC)

Zinf Audio Player 2.2.1 - .pls Stack Overflow PoC !/usr/bin/perl Discovered & Written by : Hakxer Home : www.sec-geeks.com Program : http://www.zinf.org/ ../http://prdownloads.sourceforge.net/zinf/zinf-setup-2.2.1.exe Zinf Audio Player 2.2.1 PLS FILE Buffer Overflow PoC my $chars="\x90" x 2000;...

Zinf Audio Player 2.2.1 - '.pls' Stack Overflow (PoC)

!/usr/bin/perl Discovered & Written by : Hakxer Home : www.sec-geeks.com Program : http://www.zinf.org/ ../http://prdownloads.sourceforge.net/zinf/zinf-setup-2.2.1.exe Zinf Audio Player 2.2.1 PLS FILE Buffer Overflow PoC my $chars="\x90" x 2000; openMYFILE,'hakxer.pls'; print MYFILE $chars;...

Mambo Component SOBI2 RC 2.8.2 - SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ | | | GaZa WiLL NeVeR DiE | | | | | | Proud To Be A MusLiM , Proud To Be A EgYpTiaN | | | +-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-+ Found by : Br1ght D@rk C0ntact :...

Linux/x86 - Write to /etc/passwd with uid(0) + gid(0) Shellcode (74 bytes)

Linux/x86 - Write to /etc/passwd with uid0 + gid0 Shellcode 74 bytes. Shellcode exploit for Linuxx86 platform / This shellcode writes to /etc/passwd the string for the user with uid&gid == 0; written by dev0id [email protected] rootteam.void.ru rus-sec /Efnet.org greetz: nerf w00w00 BITS 32 jmp shor...

Microsoft SQL Server fails to properly validate parameters to the sp_replwritetovarbin extended stored procedure

Overview A vulnerability in the Microsoft SQL Server spreplwritetovarbin extended stored procedure could allow an authenticated attacker to execute arbitrary code on an affected server. Description Some versions of Microsoft SQL Server contain a vulnerability in the spreplwritetovarbin stored...

Microsoft SQL Server 2005 sp_replwritetovarbin memory overwrite (update to SEC Consult SA-20081209)

Update to SEC Consult Security Advisory 20081210-0 Microsoft SQL Server spreplwritetovarbin limited memory overwrite vulnerability =================================================================== Summary: ------------ By calling the extended stored procedure spreplwritetovarbin, an attacker ca...

Immunity Canvas: MSSQL_REPLWRITETOVARBIN

Name| mssqlreplwritetovarbin ---|--- CVE| CVE-2008-5416 Exploit Pack| CANVAS Description| replwritetovarbin stored procedure overflow. Notes| CVE Name: CVE-2008-5416 VENDOR: Microsoft Notes: Exploit only works against non-DEP enabled targets. Repeatability: One-shot MSADV: MS09-004 References:...

[Full-disclosure] SEC Consult SA-20081109-0 :: Microsoft SQL Server 2000 sp_replwritetovarbin limited memory overwrite vulnerability

SEC Consult Security Advisory 20081209-0 ===================================================================================== title: Microsoft SQL Server 2000 spreplwritetovarbin limited memory overwrite vulnerability program: Microsoft SQL Server 2000 vulnerable version: =8.00.2039 homepage:...

MODx CMS <= 0.9.6.2 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. :: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor:...

MODx CMS 0.9.6.2 - Remote File Inclusion / Cross-Site Scripting

:: The Codes Like A Game Anyone Can Play With It,s :: Title: MODx CMS = 0.9.6.2 Multiple Remote Vulne RFI + XSS Vendor: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.6.2.tar.gz&utmsource=0961p2&utmmedium=web&utmcampaign=download Discover by :...

txtshop - beta 1.0 / Local File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- txtshop - beta 1.0 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: txtshop $ Version: = 1.0 $ File affected: ADMIN/header.php $ Download: http://sourceforge.net/projects/txtshop/ Found ...

vshop - Axcoto cart <= 0.1alpha / Local File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= vshop - Axcoto cart = 0.1alpha / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: vshop - Axcoto cart $ Version: = 0.1alpha $ File affected: ADMIN/header.php $...

txtshop-lfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- txtshop - beta 1.0 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: txtshop $ Version: eNYe-Sec - www.enye-sec.org --Bug -- 4. if !$language$language="ch"; 5...

phpcrs 2.06 - importFunction Local File Inclusion

phpcrs 2.06 - importFunction Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154...

FOSS Gallery Public Version <= 1.0 / Arbitrary file upload Vulnerabilities

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FOSS Gallery Public Version = 1.0 / Arbitrary file upload Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: FOSS Gallery Public Version Version: = 1.0 File affected:...

foss10-upload.txt

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version eNYe-Sec - www.enye-sec.org Upload images is only allowed to the admin but the process to upload has 3 steps with 3 pages. only the first page check the user permissions. STEPS:...

fossgp-upload.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FOSS Gallery Public Version eNYe-Sec - www.enye-sec.org -- Bug -- Website doesn't check the images format and you can upload PHP files. -- Exploit -- http://localhost/shell.php...

FOSS Gallery Public <= 1.0 Arbitrary File Upload Vulnerabilities

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= FOSS Gallery Public Version = 1.0 / Arbitrary file upload Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: FOSS Gallery Public Version...

PHPWebExplorer <= 0.09b: Local File Inclusion Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- PHPWebExplorer = 0.09b: Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: PHPWebExplorer $ Files affected: main.php / edit.php $ Version: 0.99b $ Download:...