Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...

linux/x86 sys_chmod("/etc/passwd",599) shellcode 39 bytes

Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 syschmod"/etc/passwd",599 shellcode 39 bytes ========================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 ...

dutch Book php - Remote file inclusion

Exploit for php platform in category web applications ====================================== dutch Book php - Remote file inclusion ====================================== dutch Book php - Remote file inclusion Author: Poltergeisth4cker Team: Inj3ct0r Team inj3ct0r.com Contact: email protected...

Lots XSS of Dvbbs Version 2.0++

No description provided by source. Dvbbs Version 2.0++ is the latest version of dvbbs. it has lots of xss. The Parameters:boardid、action、location、TopicDate、TopicOrder、TopicDA、orders、oper The...

JV2 Folder Gallery 3.1 - gallery.php Remote File Inclusion

JV2 Folder Gallery 3.1 - gallery.php Remote File Inclusion ----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o |...

Renista CMS - SQL Injection

Author:Amir Afghanian Discovered by :Amir Afghanian My Email: [email protected] my Y!ID: AmirCoder My Home page : www.shabgard.org My Nice name : TakFanar ============ Renista CMS BUG Only For NOTIFICATION ================== Test on CMS Owner site :http://www.rayaco.com db name :...

Uniform Server 5.6.5 Cross Site Request Forgery

!--========================================================================================================= //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / /...

TS Special Edition 7.0 - Multiple Vulnerabilities

TS Special Edition 3.2 javascript:TSQuickRate'torrent1', 'CHAGEYOURIDHERE'; 4 Apply changes and vote the torrent every time you want...

SiteServer CMS多处跨站漏洞

SiteServer CMS 是基于微软.NET 平台开发的网站内容管理系统，它集成了内容发布管理、多站点管理、定时内容采集、定时生成、多服务器发布、搜索引擎优化、流量统计等多项强大功能，独创的 STL 模板语言，通过Dreamweaver 可视化插件能够任意编辑页面显示样式，生成纯静态页面。 1.注册页面为过滤用户提交非法参数导致跨站，插入跨站语句即可： demo:http://demo.siteserver.cn/usercenter/register.aspx?ReturnUrl=%22%3E%3Ciframe%20src=%22http://www.zhuba.net%22%3E...

动网(DVbbs) Ver 8.3.0 多个跨站漏洞

动网论坛做为目前国内最大的社区论坛软件服务提供商，依靠其强大的功能、非凡的访问速度和负载能力、友好方便的客户操作界面、优质的客户服务、国内领先的 技术和强大而持续的产品研发并保持不断创新的能力，动网所提供的动网社区论坛产品已经占据了国内社区论坛产品使用比例的70%以上。 目标网站对用户提交的变量代码未进行有效的过滤或转换，允许攻击者插入恶意WEB代码。 此版本新存在两处跨站漏洞 DVbbs Version 8.3.0 等待官方补丁 demo1:...

gpEasy 1.6.1 - Cross-Site Request Forgery (Add Admin)

gpEasy 1.6.1 - Cross-Site Request Forgery Add Admin ============================================= gpEasy Date : 04-29-2010 Site : http://www.giudinvx.altervista.org/ Location : Naples, Italy -------------------------------------------------------- Application Info Site : http://www.gpeasy.com/...

Joomla! Component com_jesectionfinder - Arbitrary File Upload

Joomla! Component comjesectionfinder - Arbitrary File Upload -------------------------------------------------------------------------------------- Sid3^effects aKa HaRi Greetz to all Andhra Hackers and ICW MemebersIndian Cyber Warriors Thanks:L0rd ÇrusAdêr,d4rk-blu™®,R45C4L idi0th4ck3r,CR4C|...

NIBE heat pump - Local File Inclusion

NIBE heat pump - Local File Inclusion !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274...

PHP Classifieds 6.09 - E-mail Dump

PHP Classifieds 6.09 - E-mail Dump ======================================================================================== | Title : PHP Classifieds V6.09 E-mail Dump Vulnerability | Author : indoushka | Home : www.dz-blackhat.com | Tested on: Lunix Français v.9.4 Ubuntu | Bug : E-mail Dump...

Magneto Net Resource ActiveX 4.0.0.5 - 'NetShareEnum' Universal

'Magneto Net Resource ActiveX v4.0.0.5 NetShareEnum Exploit Universal 'Author: dookie 'Original PoC by: s4squatch - http://www.exploit-db.com/exploits/12207 'Vendor: http://www.magnetosoft.com/products/sknetresource/sknetresourcefeatures.htm 'Control: SKNetResource.ocx 'Function NetShareEnum ByVa...

McAfee Email Gateway < 6.7.2 Hotfix 2 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/39242/info McAfee Email Gateway formerly IronMail is prone to multiple vulnerabilities, including: A local privilege-escalation vulnerability A denial-of-service vulnerability. Multiple cross-site scripting vulnerabilities An information-disclosure...

CMS Made Simple 1.7 - Cross-Site Request Forgery

======================================================================= CMS Made Simple 1.7 CSRF Vulnerability ======================================================================= Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul Agrawal...

68KB Knowledge Base 1.0.0rc3 - Cross-Site Request Forgery (Edit Main Settings)

Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF Date: 2010-04-02 Author: Jelmer de Hen Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip Version: v1.0.0rc3 escapable'...

PHP Jokesite 2.0 - exec Command

PHP Jokesite 2.0 - exec Command ======================================================================================== | Title : PHP Jokesite V 2.0 exec command EXploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Tested on: windows SP2 Français V.Pnx2 2.0 ...

SiteX CMS 0.7.4 Beta - 'photo.php' SQL Injection

?php echo "\n\n\n"; echo " \n"; echo " Product: SiteX CMS 0.7.4 beta /photo.php SQL-Injection exploit \n"; echo " Usage: php.exe sitex.php www.site.com /cmspath/ \n"; echo " Require: Magicquotes = off \n"; echo " Author: Sc0rpi0n RUS http://scorpion.su \n"; echo " Special for Antichat...