IMGallery <= 2.5 Create Uploader Script Exploit

Exploit for unknown platform in category web applications =============================================== IMGallery DEVIL TEAM IRC:...

WYWO - InOut Board 1.0 Multiple Remote Vulnerabilities

No description provided by source. Title : WYWO - InOut Board 1.0 Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://cybercoded.com $$ : 9.95 $ SQL--------------------------------------------------------- http://target/path/phonemessage.asp?num=SQL Example:...

Newxooper Mapage.PHP远程文件包含漏洞

Newxooper是一款基于PHP的WEB应用程序。 Newxooper不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Mapage.PHP'脚本对用户提交的'chemin'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 newxooper newxooper 0.9.1 目前没有解决方案提供： http://www.easy-script.com http://www.example.com/compteur/mapage.php?chemin=Evil Code...

Oracle 9i10g - utl_file FileSystem Access

Oracle 9i10g - utlfile FileSystem Access -- -- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package...

8Pixel.net SimpleBlog ID SQL注入漏洞

Simple Blog是一款基于PHP的网络日记程序。 Simple Blog不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'default.asp'脚本对用户提交的"id"参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 8pixel.net Simple Blog 2.3 http://www.8pixel.net/...

Bandwebsite 1.5 - 'LOGIN' Remote Add Admin

Name: Pass: milw0rm.com 2006-12-16...

Somery Include.PHP远程文件包含漏洞

Somery是一款基于PHP的WEB应用程序。 Somery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Include.PHP'脚本对用户提交的'skindir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Somery Somery 0.4.6 目前没有解决方案提供,请关注以下链接： http://somery.danwa.net/...

Mambo Rssxt Component MosConfig_absolute_path远程文件包含漏洞

Mambo RSSXT是一款基于Mambo的应用模块。 Mambo RSSXT不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Mambo RSSXT Component 1.0 http://mamboxchange.com/projects/rssxt/...

mxBB Module Activity Games 0.92 - Remote File Inclusion

mxBB Module Activity Games 0.92 - Remote File Inclusion mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang...

Phorum &lt;= 3.2.11 (common.php) Remote File Include Vulnerability

No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...

blogsql.txt

Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...

Mambo Gallery Manager MosConfig_Absolute_Path远程文件包含漏洞

Mambo Gallery Manager是一款基于Mambo的图片程序。 Mambo Gallery Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'help.mgm.php'脚本对用户提交的"mosConfigabsolutepath"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Mambo Mambo Gallery Manager Component 0.95 r3 http://mamboxchange.com/projects/mgm/...

VUPlayer &lt;= 2.44 m3u parsing remote buffer overflow

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...

Invision Community Blog Mod 1.2.4 - SQL Injection

Invision Community Blog Mod 1.2.4 - SQL Injection 1. Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid...

Invision Community Blog Mod 1.2.4 - SQL Injection

Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string ' / 6. Change with this SQL Injection: UNION SELECT b.entryid, b.blogid, b.categoryid, b.entryauthorid, b.entryauthorname,...

VUPlayer &lt;= 2.44 (M3U UNC Name) Buffer Overflow Exploit (c)

No description provided by source. / . \ \ \ \ | | / | | | | \ / / /\ \ / \ | | \ / | |/ | |/ / \ / \ | / \ // | Y / ^ /\ | //\ \ /| / / || /\ | \ | \ / / / / 30\11\06 / || / / mm. dM8 YMMMb. dMM8 YMMMMb dMMM' YMMMb dMMMP There are doors I have yet to open YMMM MMM' windows I have yet...

[Full-disclosure] CubeCart &lt;=3.0.14 Bind Sql Injection POC.

Exploit Discoverd By Novalok & Kasper Of KasaNova Security Coded By A Friend ?php / Vendor : Devellion Limited 2006 Exploit: Blind SQL injection look below for more info Impact: of Discovered by: KasaNova Security --------------------------------------------------------------------------------...

Recipes Complete Website 1.1.14 Remote SQL Injection Vulnerabilities

No description provided by source. Coding 4 Fun Recipes Complete Website 1.1.14 http://www.easysitenetwork.com/modules.php?name=Content&pa=showpage&pid=2 ; Class = SQL Injection ; Download = http://www.easysitenetwork.com/modules.php?name=Downloads&dop=getit&lid=3 ; Found by = GregStar...

GNU Tar 1.1x - GNUTYPE_NAMES Directory Traversal

GNU Tar 1.1x - GNUTYPENAMES Directory Traversal / source: https://www.securityfocus.com/bid/21235/info GNU Tar is prone to a vulnerability that may allow an attacker to place files and overwrite files in arbitrary locations on a vulnerable computer. These issues present themselves when the...