fab-sql.txt

====================================================================== Forum AnyBoard - Sql Inyection By Firewall Application Affect: Forum AnyBoard Source Code: http://netbula.com/download/anyboardfree.zip Error : Sql inyecion in login user. ' or 'x'='x Contact: [email protected] GrEatZ :...

Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + Jinzora = 2.7 includepath Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- +...

Jinzora 2.7 - INCLUDE_PATH Multiple Remote File Inclusions

Jinzora 2.7 - INCLUDEPATH Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + Jinzora +------------------------------------------------------------------------------------------- + Details: + Jinzora has several scripts...

Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================== Jinzora 01: 27: includeonce'jzBackend.php'; //jzBackend.php is being included before the includepath var is set + jzBac...

Jinzora 2.7 - 'INCLUDE_PATH' Multiple Remote File Inclusions

+------------------------------------------------------------------------------------------- + Jinzora +------------------------------------------------------------------------------------------- + Details: + Jinzora has several scripts which do not initialize variables before using them to inclu...

mxBB Module WebLinks &lt;= 2.05 Remote Inclusion Vulnerability

No description provided by source. Title : mxBB Module WebLinks = 2.05mxrootpath Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://www.mx-system.com Dork : /modules/mxlinks/ ERROR------------------------------------------------------ .... .. includeonce $mxrootpath...

TorrentFlux <= 2.2 (Create/Exec/Delete) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================= TorrentFlux = 2.2 Create/Exec/Delete Multiple Remote Vulnerabilities ======================================================================= r0ut3r Presents... Another...

wordpress-rfi.txt

WordPress Remote File Inclusion Download:http://wordpress.org/latest.zip Found by ANtrAX http://foro.c-group.org Vulnerable Code: global $posts, $post, $wpdidheader, $wpdidtemplateredirect, $wpquery, $wprewrite, $wpdb; extract$wpquery-queryvars; requireonce$file; ..... Affected File:...

Phpjobscheduler 3.0 - 'installed_config_file' File Inclusion

====================================================================== Phpjobscheduler 3.0 - Multiple Remote File Include by Firewall Application Affect: phpjobscheduler 3.0 Source Code: http://scripts.ringsworld.com/development-tools/phpjobscheduler.v3.0.zip Code: includeonce$installedconfigfile...

OpenEMR <= 2.8.1 (srcdir) Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== OpenEMR = 2.8.1 srcdir Multiple Remote File Inclusion Vulnerabilities ======================================================================== \ /\ \ / | \ \ | / \ //...

SQL Injection Vulnerability in bfExplorer 0.0.6

Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0007 Status: Partial Date: 2006/10/31 Summary: Armorize-ADV-2006-0007 discloses SQL injection vulnerability that is found in bfExplorer BytesFall Explorer, http://sourceforge.net/projects/bfexplorer, which is is a web-based fi...

cPanel <= 10.8.x (cpwrap via mysqladmin) Local Root Exploit (php)

Exploit for unknown platform in category local exploits ================================================================= cPanel cPanel Sorry Safe-mode Is On Script Not Work On This Server "; echo "Powered By Ashiyane Security Corporation www.Ashiyane.ir"; exit; $disablef =...

WebYep 1.1.9 - webyep_sIncludePath File Inclusion

WebYep 1.1.9 - webyepsIncludePath File Inclusion ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...

comersusDB.txt

ComerSus ASP Shopping Cart Vendor : Www.Compersus.Com Credits : MFox HomePage : Www.HackerZ.ir Remote DataBase Getting ! Proof of Concept : Http://Target/Path/database/comersus.mdb...

NTFS do a Ghost(break read-write privileges)-vulnerability warning-the black bar safety net

This machine is loaded with Windows 2 0 0 0, because the working relationship will be important information to put in the C:\studio, the C drive is NTFS format, and set the following permissions: Lostar is me full control The Everyone read-only After one day, and found where the file being...

ASP backup into a picture of refinement-bug warning-the black bar safety net

For the reader: the script invasion lovers Pre-knowledge: sql injection ASP backup into a picture of refinement Text/figure luckyfeng Pictures and the database backup file into ASP or ASA Trojan is we often use to get WebShell means, however the ASP files back into a map Sheet file, there will al...

Hosting Controller 6.1 Hotfix 3.1 - Privilege Escalation

Title: An attacker can gain reseller privileges and after that can gain admin privileges Version: 6.1 Hotfix function siteaction nact= "/hosting/addreseller.asp?htype=3" window.document.all.frm1.action = window.document.all.siteact.value + nact window.document.all.frm1.submit Form1 URL: reseller...

REVERSING MRXSMB.SYS CHAPTER II “NtClose DeadLock”

REVERSING MRXSMB.SYS CHAPTER II “NtClose DeadLock” Rubn Santamarta [email protected] www.reversemode.com May 15, 2006 Abstract Kernel Object Manager is prone to a deadlock situation which could be exploitable making unkillable any process running, complicating its elimination. INDEX...

phpjobboard Authecnical admin byPass

SOFTWARE ========== phpjobboard DESCRIPTION: ============ job board administration bypass, and edit or add to new job. example http://target/phpjobboard or your path/admin.php?menu=job&adminop=job-edit&id=item id ============================================ greets...

CVE-2006-2185

PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges...