rubistar.4teachers.org XSS vulnerability

Open Bug Bounty ID: OBB-46032 Description| Value ---|--- Affected Website:| rubistar.4teachers.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

PCPIN Chat <= 5.0.4 (login/language) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PCPIN Chat = 5.0.4 \login/language\ remote cmmnds xctn\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n; echo dork: \powered by...

MyBB Follower User Plugin - SQL Injection

No description provided by source. Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:Users subscribed to inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

No description provided by source. ============================================================================================== Web3news = v0.95 PHPSECURITYADMINPATH Remote File Inclusion Exploit ===============================================================================================...

Horde 3.3.12 Backdoor Arbitrary PHP Code Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

PeerCast <= 0.1216 - Remote Buffer Overflow Exploit (win32) (meta)

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

No description provided by source. Joomla Component idoblog Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4.hlmatgmail.com Greetz : All friends & muslims HaCkeRs : Greetz2 : http://www.palcastle.org/cc/ ScriptName: Joomla ComponentName: comidoblog DORK: inurl:comidoblog...

F5 BIG-IQ 4.1.0.2013.0 - Privilege Escalation

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'json' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClien...

phpBB <= 2.0.12 Change User Rights Authentication Bypass (c code)

No description provided by source. / Paisterist's code was nice but heres mil's version. precompiled: http://www.milw0rm.com/sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...

Evaria Content Management System 1.1 File Disclosure Vulnerability

No description provided by source. Exploit Title: local file include / File Disclosure Date: Author: khayeye shotor Software Link: http://www.evaria.com/en/?view=download&dload=1 Version: Evaria Content Management System v.1.1 Thanks: khayeye sag , kandome mivei , sinehaye amam and all amehaye...

AlberT-EasySite <= 1.0a5 (PSA_PATH) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - AES: AlberT-EasySite = 1.0a5 Remote File Include Vulnerability + + + - Script name: AES: AlberT-EasySite v. 1.0a5 - Script site:...

BlueShoes Framework <= 4.6 - Remote File Include Vulnerabilities

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper...

WebprojectDB <= 0.1.3 (INCDIR) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ WebprojectDB INCDIR = v.0.1.3 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/webprojectdb/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$...

SMA-DB <= 0.3.9 (settings.php) Remote File Inclusion Vulnerability

No description provided by source. To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP Settings.php:- includeonce$pfadz.scripts/session.php;...

DevMass Shopping Cart <= 1.0 - Remote File Include Vulnerability

No description provided by source. ======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== DevMass...

Moodle <= 1.8.4 - Remote Code Execution Exploit

No description provided by source. ?php / Moodle = 1.8.4 remote code execution / $url = 'http://target.ru/moodle'; $proxy = 'localhost:8118'; $code = $argv1; if!$code echo 'Sample use: '.$argv0.' phpinfo phpinfo.html '.$argv0.' echo set '.$argv0.' /full/local/path/to/file/for/upload/phpshell.php ...

PHP Support Tickets 2.2 - Remote File Upload Vulnerability

No description provided by source. remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell...

Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit

No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: Rapidity is the essence of war: take...

primitive cms 1.0.9 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Primitive CMS 1.0.9 Multiple Vulnerabilities Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.bouzouste.info/ Software Link: http://www.bouzouste.info/link/click.php?id=1 Version: 1.0.9 Vulnerability 1...

Cyberfolio <= 2.0 RC1 (av) Remote File Include Vulnerabilities

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class CyberfolioRemoteFileIncludePOCBase: vulID = '64221' version = '1' vulDate = '2006-11-06' author = ' '...