382 matches found
MemHT Portal <= 4.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl =about MemHT Portal = 4.0 Perl exploit AUTHOR: Discovered and written by Ams ax330d doggy gmail dot com DESCRIPTION: Here we are able to make SQL-injection due to weak filtering. So, look at inc/incheader.php lines 74, where hides code $checktitle...
Mail.ru: Раскрытие полного серверного пути
Приветствую! Уязвимый ресурс - http://s2.11x11.ru Бага - http://s2.11x11.ru/config/config.php Fatal error: requireonce function.require: Failed opening required 'config/consts.inc.php' includepath='.:/usr/share/pear:/usr/share/php' in /var/www/11x11.ru/config/config.php on line 2...
wordpress_fullpathdisclosure
This plugin try to find the path in the server where WordPress is installed. Plugin type Crawl Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests, theres always the source code to understand exactly whats under the...
Sky classroom file upload vulnerability-vulnerability warning-the black bar safety net
Brief description: Allow the upload of dangerous file type,this system is still a lot of Open the network course website, as shown in Figure, landing it, and now SkyDrive. Upload a PHP file, the web site didn't filter PHP file. ! 1 8-300x166. png ! 1 8-300x166. png ! 1 8-300x166. png After enteri...
Google, Paypal, Facebook Internal IP disclosure vulnerability
Do you have any idea about an Internal IP Address or a Private IP Address that too assigned for Multinational Companies? Yeah, today we are gonna discuss about Internal IP or Private IP address Disclosure. Disclosure of an Internal IP like 192.168.. or 172.16.. , can really Impact ? Most security...
Google, Paypal, Facebook Internal IP disclosure vulnerability
Do you have any idea about an Internal IP Address or a Private IP Address that too assigned for Multinational Companies? Yeah, today we are gonna discuss about Internal IP or Private IP address Disclosure. Disclosure of an Internal IP like 192.168.. or 172.16.. , can really Impact ? Most security...
Nmap NSE net: http-favicon
Gets the favicon 'favorites icon' from a web page and matches it against a database of the icons of known web applications. If there is a match, the name of the application is printed; otherwise the MD5 hash of the icon data is printed. If the script argument 'favicon.uri' is given, that relative...
DVD Rental Software - SQL Injection
Exploit Title: DVD Rental Software SQL injection Vulnerability Date: 19/11/2010 Author: JaMbA Team: SwT Script url: http://www.commodityrentals.com/dvd.php Version: N/A Tested on: Demo CVE : EXPL0!T...
DA Mailing List System 2 - Multiple Vulnerabilities
DA Mailing List System V2 Remote Admin Login Exploit Author : Phenom Dork: DA Mailing List System V2 Powered by DigitalArakan.Net Version : 2 Exploit : 1- http://server/path/admincp.asp 2- login with "admin" as user name and 'or' as password...
PR09-02 Multiple Cross-Site Scripting (XSS) / Cross Domain redirects and Server path information disclosure on SAP BusinessObjects version 12
Hi, We have found that SAP BusinessObjects version 12 is vulnerable to Multiple Cross-Site Scripting XSS, Cross Domain redirects and Server path information disclosure with the following consecuences: -An attacker may be able to cause execution of malicious scripting code in the browser of a vict...
WEB Calendar Database Disclosure
--------------------------------------- WEB Calendarcalendar35.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : RENO + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Dork : search for it :p + Script : WEB Calendar vuln. in :...
Smart PHP Uploader 1.0 Remote File Upload Vulnerability
No description provided by source. Smart PHP Uploader 1.0 Remote File Upload Vulnerability Author : Phenom vendor : http://www.scriptsez.net language : PHP Version : 1.0 Exploit : 1- http://server/path/phpuploader.php...
PDQ Script 1.0 <== [listingid] SQL Injection
Exploit for unknown platform in category web applications ============================================ PDQ Script 1.0 == listingid SQL Injection ============================================ +===================================================================================+ | | | PDQ Script 1.0 ...
IIS 5.0 ServerVariables_Jscript.asp 暴露服务器路径
No description provided by source...
Free ASP Upload - Arbitrary File Upload
/ \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ? ----------------- Go to :...
http-favicon NSE Script
Gets the favicon "favorites icon" from a web page and matches it against a database of the icons of known web applications. If there is a match, the name of the application is printed; otherwise the MD5 hash of the icon data is printed. If the script argument favicon.uri is given, that relative U...
Shop Script Pro 2.12 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too http://www.shop-script.com/ AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULN. DESCRIPTION Look in index.php at line 101. Variable...
Shop Script Pro 2.12 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================= Shop Script Pro 2.12 Remote SQL Injection Exploit ================================================= !/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too...
Shop Script Pro 2.12 - SQL Injection
Shop Script Pro 2.12 - SQL Injection !/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too http://www.shop-script.com/ AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULN. DESCRIPTION Look in index.php at line 101. Variable...
Shop Script Pro 2.12 SQL Injection
!/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too http://www.shop-script.com/ AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULN. DESCRIPTION Look in index.php at line 101. Variable $currentcurrency is set from...