Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...

Secunia Research: OpenX Multiple Vulnerabilities

====================================================================== Secunia Research 27/01/2009 - OpenX Multiple Vulnerabilities - ====================================================================== Table of Contents Affected Software....................................................1...

PHP-CMS 1 Blind SQL Injection Exploit

--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...

ClickAuction (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠Vendor:...

SiteXS CMS 0.1.1 - Local File Inclusion

SiteXS CMS 0.1.1 - Local File Inclusion --+++==========================================================+++-- --+++====== SiteXS ". "\n+ Ex. : perl $0 localhost /SiteXS /etc/passwd". "\n+ Notes : Have fun\n\n"; my $host, $path, $file = @ARGV; usage if !$file; my $sock = new IO::Socket::INET PeerHo...

ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit

No description provided by source. ?php function usage echo "\nITLPoll v2.7 Stable2 Blind SQL Injection Exploit". "\n☢ Usage : ./itlpoll.php hostname path username or password". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1'...

MemHT Portal 4.0.1 - Remote Code Execution

!/usr/bin/perl MemHT Portal 7 Main::Usage; else HTTP::UserAgent$uagent; MemHT::Login; MemHT::Exploit$file; MemHT Exploit Package package MemHT; sub Exploit my $resp; my $file = shift@; my $path = "/index.php?page=users&op=editProfile"; m...

LightBlog Cross Site Scripting

--------------------------------------------------------- Portal Name: LightBlog Download : http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

IT Media SQL Injection Exploit

!/usr/bin/python This was written for educational purpose only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! !!! Special thanx for d3hydr8 and rsauron who inspired me !!! . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / //...

The wretched stream of the php bounce-vulnerability warning-the black bar safety net

Author: Sh@doM Met a BT site, upload the php file successfully after each visit, the file name will be changed randomly at once, and you access the current file if the point of the other action items, the files will still be renamed. Very helpless, did not think what good way, and later Emmanuel ...

Aj Classifieds - Personals v3 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Aj Classifieds - Personals v3 Remote Shell Upload Vulnerability =============================================================== AJClassifieds Personals RFu script down:...

NetSurf 1.2 hspace Integer Overflow Proof Of Concept

!/usr/bin/perl netsurfhspaceintof1.pl Netsurf 1.2 'hspace' Remote Integer Overflow PoC Exploit Jeremy Brown [email protected]/jbrownsec.blogspot.com ltrace log -- hspace = 30000, without --sync gdkgcsetcliprectangle0x8cbdaf8, 0x80c4500, 0, 0, 0 = 0x8cbda01 cairoresetclip0xb6600948, 0x80c4500, ...

DMXReady Classified Listings Manager &lt;= 1.1 SQL Injection Vulnerability

No description provided by source. Title : DMXReady Classified Listings Manager = 1.1 SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dmxready.com $$ : 99.97 $ Dork : inurl:incclassifiedlistingsmanager.asp DorkEx :...

Oracle 11g Password Sniffing and Cracking-vulnerability warning-the black bar safety net

It's now possible for us to do sniffing oracle 11g password and cracking at the same time. If the old version of Cain & abel doesn't support oracle 11g , just try the newest version of it , Cain & Abel 4.9.25 . It supports the oracle 11g sniffing and password extractor. The thing that makes it...

phosheezy 2.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote Command Execution Exploit by Osirys osirysatlivedotit osirys.org Greets: HaVoC, x0r, jay, BlackLight lol at athos...

Photobase 1.2 Local File Inclusion

START 0x01 Informations: Script : Photobase 1.2 Download : http://www.monstar.nl/php-bin/count.php3?what=photobase.zip&id=0 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Local File Inclusion Bugged file is:...

Microsoft HTML Workshop <= 4.74 Universal Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================================= Microsoft HTML Workshop = 4.74 Universal Buffer Overflow Exploit ================================================================= !/usr/bin/perl Microsoft HTML Workshop = 4.7...

Perception LiteServe 'USER' FTP命令远程缓冲区溢出漏洞

BUGTRAQ ID: 33158 CNCAN ID：CNCAN-2009010808 Perception LiteServe是一款FTP服务程序。 Perception LiteServe不正确处理'USER' FTP命令，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 提交包含超长字符串的'USER'命令，可触发缓冲区溢出，造成服务崩溃，或者以应用程序权限执行任意指令。 Perception LiteServe 2.2 Perception LiteServe 2.0.1 Perception LiteServe 2.0 2 Perception LiteServe 2.0...

PollHelper (poll.inc) Remote Config File Disclosure Vulnerability

No description provided by source. Remote Config File Disclosure ---------------------------------------------------- script: PollHelper download from:http://www.freedville.com/oss/PollHelper.zip vul: www.site.com/path/poll.inc ............................... $dbhost = ""; $dbusername = "";...

playSMS 0.9.3 Remote And Local File Inclusion Vulnerabilities

==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...