CVE-2008-6432

...

Opera 9.61 opera:historysearch Code Execution Exploit PoC

Exploit for unknown platform in category remote exploits ========================================================= Opera 9.61 opera:historysearch Code Execution Exploit PoC ========================================================= function x window.open'opera:historysearch?q=%2A"&p=1&s=1';...

Absolute Podcast 1.0 - Remote Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By : Hakxer Home : Www.educ-up.com Type Gap : Insecure cookie handling script : Absloute Podcast V 1.0 see script http://www.xigla.com/apodcasting/demo.htm Greetz...

MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

db Software Laboratory VImpX - VImpX.ocx Multiple Vulnerabilities

db Software Laboratory VImpX - VImpX.ocx Multiple Vulnerabilities ----------------------------------------------------------------------------- db Software Laboratory VImpX VImpX.ocx Multiple vulnerabilities url: http://www.dbsoftlab.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

LightBlog 9.8 (GET,POST,COOKIE) Multiple LFI Vulnerabilities

No description provided by source. LightBlog 9.8 GET,POST,COOKIE Multiple Local File Inclusion Vulnerabilies url: http://www.publicwarehouse.co.uk/phpscripts/lightblog.php Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was...

İltaweb Alışveriş Sistemi (tr) Sql inj

Author : By nйtRoot Contact: [email protected] Greetz : BugBusters Thanx : Dumenci Sabneq LaqNes Neco MecTruy qopeLi ... Note : No War..! Script : ltaweb Alveri Sistemi tr Sql inj http://www.aspindir.com/goster/5631 Price : 250 $ Dork : Powered by LTAWEB Dork : urunler.asp?catno= Exploit :...

LokiCMS 0.3.4 (admin.php) Create Local File Inclusion Exploit

Exploit for unknown platform in category web applications ============================================================= LokiCMS 0.3.4 admin.php Create Local File Inclusion Exploit ============================================================= LokiCMS 0.3.4 admin.php Create Local File Inclusion...

Easynet4u Forum Host - forum.php SQL Injection

Easynet4u Forum Host - forum.php SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & HiSoK4 & bibi-info & crazy-zero all muslims milw0rm.com 2008-10-10...

Easynet4u faq Host - faq.php SQL Injection

Easynet4u faq Host - faq.php SQL Injection Remote SQL Injection SuB-ZeRo SuB-ZeRo my best freinds :: x.CJP.X & ach2008 & carlos the jackel & crazy-zero & bibi-info & HiSoK4 all muslims milw0rm.com 2008-10-10...

Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit

!-- Autodesk DWF Viewer Control / LiveUpdate Module remote code execution exploit by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ tested against IE6 tested software: Revit Architecture 2009 sp2 Autodesk Design Review 2009 which also comes with Revit dll settings both: RegK...

RPortal 1.1 - file_op Remote File Inclusion

RPortal 1.1 - fileop Remote File Inclusion RPortal v1.1 Rportal is a management system of contents simple and powerful Web, enabling you to create your site in a few minutes, while profiting from a complete and effective administration. Remote and Local File Inclusion Vulnerability = 1.1 Found th...

Joomla! Component imagebrowser 0.1.5 rc2 - Directory Traversal

Joomla! Component imagebrowser 0.1.5 rc2 - Directory Traversal Joomla Imagebrowser File Inc. Cr@zyKing / www.biyosecurity.com / sqL Lov3r'Z Crew Co. 2008 Down : http://www.joomlatr.org/index.php/component/remository/?func=fileinfo&id=129 FI :...

AJ Auction Pro Platinum (seller_id) SQL Injection Vulnerability

No description provided by source. |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ \L\ \ | |...

Jetik Emlak ESA 2.0 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Jetik Emlak ESA 2.0 System Script KayitNo multiple remote sql inj ---------------------------------------------------------- Discovered By: ZoRLu Date: 24.09.2008 contact: [email protected] contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...

Observer 0.3.2.1 - Multiple Remote Command Execution Vulnerabilities

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl observer $output"; ... Bug2: ./observer-0.3.2.1/html/netcmd.php ... switch $GETcmd case 'whois': $output = /usr/bin/whois $GETquery...

plaincart-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu -QKrun1x-P47tr1ck - FeDeReR -MAGE -JeTFyrE-DON-Outlawz and all darkc0de members...

e107 Plugin Image Gallery 0.9.6.2 - SQL Injection

e107 Plugin Akira Powered's "Image Gallery" Remote SQL-injetion Vulnerability Author: boom3rang Site: www.khg-crew.ws Greetz: KHG & H!tm@N & chs & redc00de & proxy-ki11er Site: www.khg-crew.ws - Download Plugin: http://www.akirapowered.org/download.php?view.73 - Dork:...

Basic PHP Events Lister 1.0 - SQL Injection

Basic PHP Events Lister 1.0 - SQL Injection / \ /\ /\ / \ / \ | | | | \ / / ||| | | | | | | | | | \ / \ | | | | | | || | / \ \ | | || | / / /\ \ |/ / / / Basic PHP Events Lister Remote SQL Injection Author: 0x90 HomePage: www.0x90.com.ar Contact: Gunsat0x90dotcomdotar Script: Basic PHP Events...

MyFWB 1.0 (index.php page) Remote SQL Injection Vulnerability

No description provided by source. MyFWB 1.0 Remote SQL Injection Author: 0x90 url: www.0x90.com.ar Product: MyFWB download: http://myfwb.co.cc/downloads/myfwb1.0FSedition.zip Version: 1.0 URL: http://www.fsoft.co.nr/ Vulnerability Class: SQL Injection contact: Gunsat0x90dotcomdotar Username:...