BBlog 0.7.6 - mod SQL Injection

BBlog 0.7.6 - mod SQL Injection BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln: if$GET'mod' $pluginrow = $bBlog-getrow"select from ".TPLUGINS." where name='".$GET'mod'."' and type='modifier'"; PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bbauthors--...

moziloCMS 1.10.1 (download.php) Arbitrary Download File Exploit

No description provided by source. !/usr/bin/perl moziloCMS 1.10.1 Perl exploit discovered & written by Ams ax330d doggy gmail dot com DESCRIPTION: Vulnerability hides in "download.php", which we can use to download any file we want to. Here, for example, "admin/conf/logindata.conf". Btw, not ver...

ABG Blocking Script 1.0a (abg_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...

phpx-cookie.txt

======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypass Date: 31 July 2008...

Article Friendly ProStandard - SQL Injection

Article Friendly ProStandard - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability Article Friendly Pro categorydetail.php Cat Article Friendly Standard authordetail.php autid http://www.articlefriendly.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email :...

e107 Plugin BLOG Engine 2.2 - Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - Blind SQL Injection !/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members ...

e107 Plugin BLOG Engine 2.2 - Blind SQL Injection

!/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 &...

GNU Coreutils 'pam_succeed_if' PAM本地验证绕过漏洞

BUGTRAQ ID: 30363 CVE ID:CVE-2008-1946 CNCVE ID：CNCVE-20081946 GNU Coreutils是一款提供一整套基本的shell工具的软件包。 GNU Coreutils存在验证绕过问题，本地攻击者可以利用漏洞运行'su'命令来获得对锁住或过期帐户的访问。 配置文件中针对"su"命令没有正确的使用pamsucceedif PAM，如果目标帐户的密码被运行"su"命令的用户知道的情况下，可使用此命令更改锁住或过期用户帐户。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux ES ...

Many master elevated skill-vulnerability warning-the black bar safety net

The present article combines many of the master elevated tips When we get a webshell when next you want to do is elevate privileges Personal summary as follows: 1: C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere see if you can jump to this directory, if the line that is t...

IntelliTamper 2.0.7 (html parser) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ============================================================ IntelliTamper 2.0.7 html parser Remote Buffer Overflow PoC ============================================================ !/usr/bin/perl ksOSe - 07/21/2008 There are some BOFs in the html...

Arctic Issue Tracker 2.0.0 - filter SQL Injection (1)

Arctic Issue Tracker 2.0.0 - filter SQL Injection 1 IloveYouTryaG |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // |...

scripteen-grabber.txt

Scripteen Free Image Hosting Script V1.2. cookie Admin Password Grabber Exploit Coded By RMx - Liz0ziM Web:www.biyosecurity.com Dork:"Powered by Scripteen Free Image Hosting Script V1.2" TARGET HOST: Example:www.xxxx.com TARGET PATH: Example:/ or /scriptpath/ Sending Exploit..'; $packet ="GET...

Maian Uploader <= 4.0 Insecure Cookie Handling Vulnerability

No description provided by source. -+================================================================================+- -+ Maian Uploader = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...

Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution

Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...

joomlaaltas-sql.txt

!/usr/bin/perl -w Joomla Component altas v 1.0 Multiple Remote SQL Injection variables vuln : ano & mes Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Islamic Security Team & and all musulmans hackers ComponentName: altas ScriptName: Joomla Dork :...

Unixware utilities buffer overflow

No description provided by source. / 04/2008: public release I have'nt seen any advisory on this; possibly still not fixed. SCO UnixWare Reliant HA Local Root Exploit By qaaz / include stdio.h include stdlib.h include string.h include unistd.h include errno.h include fcntl.h define TGT1...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Fonality trixbox - langChoice Local File Inclusion (connect-back) (2)

Fonality trixbox - langChoice Local File Inclusion connect-back 2 !/usr/bin/perl -w Jean-Michel BESNARD / LEXSI Audit 2008-07-09 This is an update of the previous exploit. We can now get a root shell, thanks to sudo. perl trixboxfiv2.pl 192.168.1.212 Please listen carefully as our menu option has...

ContentNow 1.4.1 (Upload/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= ContentNow 1.4.1 Upload/XSS Multiple Remote Vulnerabilities ============================================================= ,--^----------,--------,-----,-------^--, | |||||||||...

Panda Security ActiveScan 2.0 (Update) Remote BOF Exploit

No description provided by source. Author: Karol Wiesek karol at wiesek dizd0t pl Homepage: http://karol.wiesek.pl/ There exists two vulnerabilities in Panda Security ActiveScan 2.0 Update function. 1 typical overflow this exploit 2 Update function allows to install any attacker suplied CABinet...