revokebbrc11-sql.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...

Mega File Hosting Script 1.2 - fid SQL Injection

Mega File Hosting Script 1.2 - fid SQL Injection Script: Mega File Hosting script Type: SQL Injection 1923TURK.ORG TURKiSHWARRiORR Step 1: Register an account Step 2: login and go to /members.php?folders=1 Step 3: Create a folder with any name Exploitation options: ADIM 1:...

RunCMS 1.6.1 - 'msg_image' SQL Injection

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a public Exploit...

Novell eDirectory unauthenticated access to SOAP interface

= Affected software : Editor : Novell Name : eDirectory Version : 8.7.x see note and 8.8.2 Services : TCP/8028 HTTP and TCP/8030 HTTPS = External references : http://www.novell.com/support/viewContent.do?externalId=3866911&sliceId=1 https://vulners.com/cve/CVE-2008-0926 = Technical details : A SO...

phpfusion-sql.py.txt

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

PHP-Fusion 6.01.14 - Blind SQL Injection

!/usr/bin/python """ ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This was a priv8 Exploit...

exbb-lfirfi.txt

==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a public Exploit...

ExBB 0.22 - LocalRemote File Inclusion

ExBB 0.22 - LocalRemote File Inclusion ==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a...

ExBB 0.22 - Local/Remote File Inclusion

==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a public Exploit...

MySQL yaSSL SSL Hello message buffer overflow

Added: 03/10/2008 CVE: CVE-2008-0226 BID: 27140 OSVDB: 41935 Background MySQL is an open-source database software package available for multiple platforms. yaSSL is an SSL library. MySQL, if SSL support is enabled, uses yaSSL by default. Problem A buffer overflow vulnerability in the...

OpenSiteAdmin 0.9.1.1 - Multiple File Inclusions

OpenSiteAdmin 0.9.1.1 - Multiple File Inclusions Software Vulnerable: OpenSiteAdmin 0.9.1 BETA and maybe prior versions. Vulnerable Code: -OpenSiteAdmin/indexFooter.php requireonce$path."footer.php"; -OpenSiteAdmin/scripts/classes/DatabaseManager.php requireonce$path."OpenSiteAdmin/include.php";...

osa-rfi.txt

Software Vulnerable: OpenSiteAdmin 0.9.1 BETA and maybe prior versions. Vulnerable Code: -OpenSiteAdmin/indexFooter.php requireonce$path."footer.php"; -OpenSiteAdmin/scripts/classes/DatabaseManager.php requireonce$path."OpenSiteAdmin/include.php";...

OpenSiteAdmin 0.9.1.1 - Multiple File Inclusions

Software Vulnerable: OpenSiteAdmin 0.9.1 BETA and maybe prior versions. Vulnerable Code: -OpenSiteAdmin/indexFooter.php requireonce$path."footer.php"; -OpenSiteAdmin/scripts/classes/DatabaseManager.php requireonce$path."OpenSiteAdmin/include.php";...

All Club CMS 0.0.1f - index.php Local File Inclusion

All Club CMS 0.0.1f - index.php Local File Inclusion Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download:...

All Club CMS 0.0.1f - 'index.php' Local File Inclusion

Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...

CVE-2008-0395

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $SERVER superglobal...

CVE-2008-0395

Kayako SupportSuite 3.11.01 is affected by CVE-2008-0395: an information-disclosure flaw where a direct request to syncml/index.php prints the PHP $_SERVER superglobal, allowing remote attackers to obtain server configuration information. The vulnerability is triggered through an accessible endpo...

CVE-2008-0395

Kayako SupportSuite 3.11.01 allows remote attackers to obtain server configuration information via a direct request to syncml/index.php, which prints the contents of the $SERVER superglobal...

PHP-Nuke (ALL versions) Multiple XSS and HTML injection

PHP-Nuke ALL versions Search Module multiple XSS and HTML injection ------------------------------------------------------------------- The well-known PHP-Nuke CMS is vulnerable to multiple XSS attacks and HTML injections through the Search Module. The request is made using POST, but the whole...

vainifileoverwrite-06_041.txt

Portcullis Security Advisory 06-041 Vulnerable System: Visionsoft Audit Vulnerability Title: Ths VSAOD server allows unauthenticated ini file overwrites. Vulnerability discovery and development: Portcullis Security Testing Services discovered this vulnerability during an application assessment...