3115 matches found
CMS from Scratch <= 1.1.3 (image.php) Directory Traversal Vulnerability
Exploit for unknown platform in category web applications ======================================================================= CMS from Scratch special THanks to EgiX For founded it :d: Exploit : http://localhost/path/cms/images.php?dir=c: Example :...
cmsscratch-upload.txt
?php / ----------------------------------------------------------------- CMS from Scratch = 1.1.3 fckeditor Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.1.: http://cmsfromscratch.com/ link.2.:...
Proje ASP Portal 2.0 - 'id' Multiple SQL Injections
source: https://www.securityfocus.com/bid/29427/info Proje ASP Portal is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application,...
PHP 5.2.6 sleep() Local Memory Exhaust Exploit
Exploit for multiple platform in category dos / poc ============================================== PHP 5.2.6 sleep Local Memory Exhaust Exploit ============================================== There is some kind of issue in PHP we can run out memory even on SAFEMODE script simply allocate maximum o...
DZOIC Handshakes 3.5 - fname SQL Injection
DZOIC Handshakes 3.5 - fname SQL Injection source: https://www.securityfocus.com/bid/29353/info DZOIC Handshakes is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...
VLC 0.8.6d SSA Parsing Double Sh311 Universal Exploit
Exploit for unknown platform in category local exploits ===================================================== VLC 0.8.6d SSA Parsing Double Sh311 Universal Exploit ===================================================== !/usr/bin/python VLC 0.8.6d Double Sh311 Universal Exploit CVE-2007-6681...
PHP Jokesite 2.0 - 'cat_id' SQL Injection
|| || | || o,7 || . o7 || 4||| ow, : / / . ================================ ========================== ==================== |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings...
MeltingIce File System <= 1.0 Remote Arbitrary Add-User Exploit
Exploit for unknown platform in category web applications =============================================================== MeltingIce File System ; print "\nUsernamecreate's your username: "; chompmy $usr=; print "\nPasswordcreate's your password: "; chompmy $pwd=; print "\nEnter Quotaquotamb of...
Pet Grooming Management System <= 2.0 Arbitrary Add-Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System = 2.0 Arbitrary Add-Admin Exploit -+-\n"; print "-+- Discovered && Coded By: t0pP8uZz - Discovered On: 15 MAY 2008 -+-\n"; print "-+- Script Download:...
Smeego 1.0 - Cookie lang Local File Inclusion
Smeego 1.0 - Cookie lang Local File Inclusion Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if...
SunShop Version 3.5.1 Remote Blind Sql Injection
!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "rn+-----------------------------------------+rn"; print "+Bli...
CMS Made Simple <= 1.2.4 (FileManager module) File Upload Exploit
No description provided by source. ?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX...
Lanius CMS 1.2.16 - 'FCKeditor' Arbitrary File Upload
0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initiali...
CaLogic Calendars 1.2.2 - langsel SQL Injection
CaLogic Calendars 1.2.2 - langsel SQL Injection /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars...
Linkspile (link.php cat_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== Linkspile link.php catid Remote SQL Injection Vulnerability ============================================================== Remote SQL Injection Vulnerabilities Linkspile link.p...
EQdkp 1.3.2f - user_id Authentication Bypass
EQdkp 1.3.2f - userid Authentication Bypass ?php // EQDKP 1.3.2f Authentication Bypass PoC // [email protected] $data'autologinid' = 'x'; $data'userid' = "1' " . "UNION SELECT " . "1, " . // userid "'a', " . // username "'x', " . // userpassword "'', " . // useremail "1, " . // useralimit "1, "...
OBlog (tags.asp) Remote SQL Injection Exploit
No description provided by source...
galleristic-sql.txt
/', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c...
Galleristic 1.0 - cat SQL Injection
Galleristic 1.0 - cat SQL Injection /', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c milw0rm.com 2008-05-07...
maianguestbook-xss.txt
---------------------------------------------------------------- Script : Maian Guestbook v3.2 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...