3108 matches found
Living Local 1.1 (XSS-RFU) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Living Local 1.1 XSS-RFU Multiple Remote Vulnerabilities ========================================================== Authot: Bgh7 Home: http://ozelteam.com - Turk Bilisim Gucleri...
eZ Publish < 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit
No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...
PHPepperShop 1.4 Cross Site Scripting
Vulnerable Version:PHPepperShop v 1.4 Homepage:http://www.phpeppershop.com This is 4 reflective XSS flaws in the URI. Trust no one not even your $SERVERPHPSELF http://10.1.1.10/shop/kontakt.php/'alert1 http://10.1.1.10/index.php/%22%3Cscript%3Ealert1%3C/script%3E...
Bonza Cart <= 1.10 Admin Password Changing Exploit
No description provided by source. ?php / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Bonza Cart <= 1.10 Admin Password Changing Exploit
Exploit for unknown platform in category web applications ================================================== Bonza Cart = 1.10 Admin Password Changing Exploit ================================================== ?php / ============================================================================== /...
PayPal eStore Admin Password Changing Exploit
Exploit for unknown platform in category web applications ============================================= PayPal eStore Admin Password Changing Exploit ============================================= ?php / ============================================================================== / \ | | | | / \...
Discuz! 1_modcp_editpost.tpl.php xss bug
在文件1modcpeditpost.tpl.php里代码: ..... ? elseif$action == 'editmessage' ? textarea type="text" id="message?=$pid?" name="message?=$pid?" style="width: 80%; height: 200px; overflow: visible" ondblclick="doaneevent"?=$orig'message'?/textarea p style="margin: 5px; text-align: center;" button...
ClamAV < 0.94.2 (JPG File) Stack Overflow PoC
No description provided by source. const char crashstr = "\xff\xd8" // jpg marker "\xff\xed" // exif data "\x00\x02" // length "Photoshop 3.0\x00" "8BIM" "\x04\x0c" // thumbnail id "\x00" "\x01" "\x01\x01\x01\x01" "0123456789012345678912345678"; // skip over 28 bytes include stdio.h include...
Calendar MX Professional 2.0.0 Blind SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:calendarEventupdate.asp ID Blind SQL Injection Vulnerability Vendor: www.mxmania.net Software: Calendar Mx Professional author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...
bcoos 1.0.13 (viewcat.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ============================================ bcoos 1.0.13 Remote SQL Injection Exploit ============================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
andysphpkb-upload.txt
============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Pre Classified Listings 1.0 - 'signup.asp' Cross-Site Scripting
source: https://www.securityfocus.com/bid/32567/info Pre Classified Listings is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user i...
activewebmail-blindsql.txt
----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...
All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit
No description provided by source. !/usr/bin/perl =about All Club CMS = 0.0.2 Remote DB Config Retrieve Exploit ------------------------------------------------------- by athos - stakerathotmaildotit download on http://sourceforge.net ------------------------------------------------------- Usage:...
OraMon 2.0.1 Remote Config File Disclosure Vulnerability
Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...
Basic-CMS - Blind SQL Injection
Basic-CMS - Blind SQL Injection ================================================================== Basic PHP CMS index.php id Blind SQL Injection Vulnerability ================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
Star Articles 6.0 Remote File Upload Vulnerability
Exploit for unknown platform in category web applications ================================================== Star Articles 6.0 Remote File Upload Vulnerability ================================================== Star Articles 6.0 Remote File Upload...
Clean CMS 1.5 (Blind SQL Injection/XSS) Multiple Remote Vulnerabilities
No description provided by source. Clean CMS 1.5 Blind Sql & XSS Multiple Remote Vuln. script: http://www.4yoursite.nl/scriptcleancms.php ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi...
Disable Firewall
Added: 11/25/2008 Background This tool attempts to disable the firewall on the target. Limitations A connection to the target is required to run this tool. The connection requires root privileges on Unix and Linux targets. Platforms Windows / Linux / Unix...
Clean CMS 1.5 (full_txt.php id) Blind SQL Injection Exploit
No description provided by source. Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for education...