PAPOO 3_RC3 - SQL Injection Admin Credentials Disclosure

PAPOO 3RC3 - SQL Injection Admin Credentials Disclosure !/usr/bin/php -q -d shortopentag=on ? echo "PAPOO = 3RC3 SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Help Contact Imprint Sitemap" |...

[Full-disclosure] phpSysInfo arbitrary file identification

phpSysInfo is a popular webscript for displaying stats about a webserver available from http://phpsysinfo.sourceforge.net/ with 365012 downloads to date. A vulnerability which allows an attacker to identify if a file exists on the remote system has been identified. By supplying a directory...

linux/x86 - portbind define your own port 84 bytes

linux/x86 portbind define your own port 84 bytes. Shellcode exploit for linx86 platform / Shellcode - portbind 84 bytes Copyright c 2002 Giuseppe Gottardi 'oveRet' All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the...

CVE-2006-3312

The CVE-2006-3312 entry documents multiple XSS vulnerabilities in QaTraq 6.5 RC and earlier, exploitable via numerous parameters across several PHP files (e.g., top.inc, queries_view_search.php, components_.php, design_ .php, phase_.php, download.php, login.php, products_ .php). The root cause is...

IE_ONE_MINOR_ONE_MAJOR

REPORT NAME: PLEBO-2006.06.16-IEONEMINORONEMAJOR DESTINATION: To Publish EMAIL RECPT: bugtraq CONTENTS 0. IMPORTANT NOTICE 1. SUMMARY 2. READ CONTENT OF ANY DOMAIN - PROOF OF CONCEPT 3. READ CONTENT OF ANY DOMAIN - TIPS FOR MATURE EXPLOIT 4. DOUBLE-CLICK ANYWHERE ON WEB PAGE COULD ALLOW REMOTE CO...

Microsoft Excel 2003 - Hlink Stack Buffer Overflow (SEH)

!perl "Microsoft Office Excel 2003" Hlink Stack/SEH Overflow Exploit Author: Manuel Santamarina Suarez The vulnerability was discovered by 'kcope'. First click on the link and then on the "Yes" button to cause the stack overflow. fixed shellcode location !! Must be free of Unicode null terminator...

Apple Mac OSX 10.4.x - OpenLDAP Denial of Service

source: https://www.securityfocus.com/bid/18728/info Mac OS X Open Directory Server is prone to a denial-of-service vulnerability because it fails to handle exceptional conditions. An attacker can exploit this issue to cause a crash in the LDAP server, effectively denying service to legitimate...

Eduha Meeting php shell upload Vulnerabilities

Eduha Meeting php shell upload Vulnerabilities Site:http://eduha.forever.kz/ Demo:http://nextlevel.astrakhan.ru/meeting/ ---------------------------------------------------- Example: http://victim/path/index.php?act=add add photoupload php phpshell Bug Video:...

Joomla! 1.0.9 - Weblinks Blind SQL Injection

Joomla! 1.0.9 - Weblinks Blind SQL Injection !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$stri...

Chipmailer <= 1.09 Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Chipmailer = 1.09 Multiple Vulnerabilities Release Date: 2006/06/13 Last Modified: 2006/06/13 Author: Tamriel tamriel at gmx dot net Application: Chipmailer = 1.09 Risk: Medium Vendor Status: no patch available Vendor Site: chipmailer.de...

asianxoXSS.txt

AsianXO.com Homepage: http://www.asianxo.com/ Effected files: directory.php profiles.php Input boxes of editing profile ---------------------------- XSS Vulnerability via dirid: Directory.php PoC: http://www.axo2.com/directory.php?dirid=1" inaurl injection along with tags, which also reveals some...

GUESTEX-exec.pl.txt

Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: GUESTEX-exec.pl Date: 06/07/2006 Version: 1.00 1.00 06/07/2006 - GUESTEX-exec.pl created Description: GUESTEX guestbook is vulnerable to remote code execution in how it handles it's 'email' parameter. $form'email' is used when openni...

blur6ex 0.3.462 - 'ID' Admin Disclosure / Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on ? echo "blur6ex = 0.3.462 'ID' blind SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by blur6ex"\r\n\r\n"; / works regardless of php.ini settings /...

MiraksGalerie <= 2.62 Multiple Remote command execution

/ Federico Fazzi, [email protected] / MiraksGalerie = 2.62 Multiple Remote command execution / 07/06/2006 4:58 Bug: pcltar.lib.php: line 34 - 35 --- if !isset$gpcltarlibdir $gpcltarlibdir = "lib"; etc.. --- galimage.lib.php: line: 157 - 158 --- for$i=count$listconfigfile-1; $i=0; $i--...

OpenEMR <= 2.8.1 (fileroot) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ OpenEMR = 2.8.1 Remote File Include Vulnerability $$ Script site: http://sourceforge.net/projects/openemr/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by:...

Claroline Multiple Script includePath Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'includePath' parameter before using it to include PHP code in the...

CS-Cart <= 1.3.3 (classes_dir) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 classesdir = Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...

WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 path = Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$...

Web site XSS using BOM on UTF-8 pages — Mozilla

Masatoshi Kimura reports that the Unicode Byte-order-Mark BOM is stripped from UTF-8 pages during the conversion to Unicode before the parser sees the web page. As a result the parser will see and process script tags that web input sanitizers may miss because they appear as "scrBOMipt" or similar...

metajour 2.1 - 'system_path' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM metajour 2.1 systempath - Remote File Include Vulnerabilities Script site: http://www.metajour.org Find by Kacper Rahim. Greetings; DragonHeart, Satan, Leito, Leon, Luzak, Adam, DeathSpeed, Drzewko, pepi ;- Special greetz DragonHeart : Contact: [email protected] ...