3102 matches found
phpmysport-rfi.txt
------=Part134509048419.1173540747323 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Application : phpMySport CMS URL : http://phpmysport.sourceforge.net/en/ Variable menu.php includeonceROOT."/team/sqlteam.php";...
PHP 4.4.6 - 'cpdf_open()' Local Source Code Disclosure
?php / PHP 4.4.6 cpdfopen source code disclosure poc by rgod site: http://retrogod.altervista.org to be launched from the cli this will show as output something like this: ClibPDF: Cannot open A 11111$mypasswordis="suntzu";newline $mypasswordis="suntzu";etc... for PDF output X-Powered-By: PHP/4.4...
Netrek 2.12.0 pmessage2() Remote Limited Format String Exploit
Exploit for unknown platform in category dos / poc ============================================================== Netrek 2.12.0 pmessage2 Remote Limited Format String Exploit ============================================================== Luigi Auriemma Application: Netrek http://www.netrek.org...
Oracle 10g Database - SUBSCRIPTION_NAME SQL Injection (2)
Oracle 10g Database - SUBSCRIPTIONNAME SQL Injection 2 source: https://www.securityfocus.com/bid/13236/info Oracle database is prone to an SQL-injection vulnerability because the software fails to properly sanitize user-supplied data. The 'SUBSCRIPTIONNAME' parameter is vulnerable. Packages that...
Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit
Exploit for unknown platform in category web applications =============================================================== Extreme phpBB 3.0.1 functions.php Remote File Include Exploit =============================================================== C xoron Name: phpBB Extreme 3.0.1 phpbbrootpath...
snort-py.txt
!/usr/bin/python Snort DCE/RPC Preprocessor Buffer Overflow DoS Author: Trirat Puttaraksa http://sf-freedom.blogspot.com For educational purpose only This exploit just crash Snort 2.6.1 on Fedora Core 4. However, Code Execution may be possible, but I have no time to make it : I will post the...
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues to steal cookie-based authentication credentials, view...
Oracle 10g - KUPV$FT.ATTACH_JOB GrantRevoke dba Permission
Oracle 10g - KUPV$FT.ATTACHJOB GrantRevoke dba Permission !/usr/bin/perl Remote Oracle KUPV$FT.ATTACHJOB exploit 10g Grant or revoke dba permission to unprivileged user Tested on "Oracle Database 10g Enterprise Edition Release 10.1.0.3.0" REF: https://www.securityfocus.com/bid/16294 AUTHOR: Andre...
NukeSentinel 2.5.05 - nukesentinel.php File Disclosure
NukeSentinel 2.5.05 - nukesentinel.php File Disclosure !/usr/bin/php File Disclosure Maybe work on other versions. Interesting exploit = if$argc URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -file Options Example: $argv0 -u...
NukeSentinel 2.5.05 - 'nsbypass.php' Blind SQL Injection
!/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -victim Opts Options: -isadmin Is the victim an Admin 1 or a normal user default=0 ? -prefix Table prefix default=nuke -tid If you have already used this sploit -b...
phpnuke-sql.txt
exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2 ifdocument.form1.field1.value=="" alert"Exploit...
VS-Link-Partner <= 2.1 (script_pfad) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ VS-Link-Partner VS-Link-Partner //'=============================================================================================== //'Script Name: VS-Link-Partner //'.... //'...
Drupal 5.1 - Post Comments Remote Command Execution
Drupal 5.1 - Post Comments Remote Command Execution !/usr/bin/perl $Id: milw0rmdrupalv5.pl,v 0.2 2007/02/15 13:40:29 str0ke Exp $ milw0rmdrupalv5.pl - Drupal Description ----------- Previews on comments were not passed through normal form validation routines, enabling users with the 'post comment...
LightRO CMS 1.0 - index.php?projectid SQL Injection
LightRO CMS 1.0 - index.php?projectid SQL Injection exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl...
Advanced Poll 2.0.5-dev - Remote Admin Session Generator
!/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...
Categories hierarchy phpBB Mod 2.1.2 - 'phpbb_root_path' Remote File Inclusion
C xoron Name: Categories hierarchy v2.1.2 phpbbrootpath Remote File Include Exploit Script name: Ptifo mod-CH212installed Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=125710 xoron.biz - xoron.info Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjo...
Photo Galerie Standard 1.1 - view.php SQL Injection
Photo Galerie Standard 1.1 - view.php SQL Injection Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=S...
EQdkp 1.3.1 - Referer Spoof Remote Database Backup
EQdkp 1.3.1 - Referer Spoof Remote Database Backup Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: "Powered by EQdkp" Author: Eight10 Contact: [email protected]...
CA BrightStor ARCserve - lgserver.exe Remote Stack Overflow
CA BrightStor ARCserve - lgserver.exe Remote Stack Overflow !/usr/bin/python Remote exploit for the CA BrightStor Arcserve stack overflow as described in http://www.securityfocus.com/archive/1/458648/30/0/threaded Winny Thomas ;- Author shall bear no responsibility for any screw ups caused by usi...