Project Pier Arbitrary File Upload

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "Project Pier...

ProjectPier 0.8.8 Shell Upload

Exploit for php platform in category web applications ProjectPier 0 echo $FILES"file""error" . " " . $FILES"file""name" . " " . $FILES"file""tmpname"; else $folder = rtrim './upload/' . $POST'folder' , '/'; @mkdir$folder, 0777, true; $seq = strpadint $POST"part",4,"0",STRPADLEFT;...

ProjectPier 0.8.8 Shell Upload

ProjectPier 0 echo $FILES"file""error" . " " . $FILES"file""name" . " " . $FILES"file""tmpname"; else $folder = rtrim './upload/' . $POST'folder' , '/'; @mkdir$folder, 0777, true; $seq = strpadint $POST"part",4,"0",STRPADLEFT; moveuploadedfile$FILES"file""tmpname", $folder . '/'...

Joomla FreiChat Shell Upload

joomla FreiChat upload shell Exploit Title :joomla FreiChat upload shell Google Dork: inurl:/freichat/client/ Exploit : http://site.com/path/freichat/client/plugins/upload/html.php Author: BHG Security Center Home: http://cc.black-hg.org/ - http://greyh4t.com/cc/ Tested on: linux+apache...

WordPress Plugin Sexy Add Template - Cross-Site Request Forgery

WordPress Plugin Sexy Add Template - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/55666/info The Sexy Add Template plugin for WordPress is prone to a cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests. Exploiting this...

Auxilium PetRatePro SQL Injection / Shell Upload

Exploit Title: Auxilium PetRatePro Multiple Vulnerabilities Date: 14/09/2012 Author: DaOne @LibyanCA Software Link: http://www.auxiliumsoftware.com Google Dork: "N/A" 1-Remote Add Admin: Create New Administrator Username Password Name Email Address 2-SQL Injection viewcomments.php parameter phid...

eking CMS Shell Upload

In The Name Of God eking CMS File Upload Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Name:eking CMS Vendor: http://www.eking.cc/ Date: 2012-09-13 Author: Mh0122 Thanks to: MojiRider Contact: [email protected] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= + Dork: inurl:admin/upload.php + Vulnerability...

MachForm Remote Shell Upload

| @@@@@@@@ @@@@@@@@@ @@ @@ @@@@@ @@ @@ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @@@ @ @ @ @ @ @ @ @ @ @ @ | | @@@@@@@@ @@@ @@@ @ @ @ @ @ @ @ @ @ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @@@ @ | | @@@@@@@@ ...

PersianTools SQL Injection / Shell Upload

| @@@@@@@@ @@@@@@@@@ @@ @@ @@@@@ @@ @@ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @@@ @ @ @ @ @ @ @ @ @ @ @ | | @@@@@@@@ @@@ @@@ @ @ @ @ @ @ @ @ @ @@@@@@@@ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @ | | @ @ @ @ @ @ @ @ @ @ @ @ @@@ @ | | @@@@@@@@ ...

Web@All CMS 2.0 Shell Upload / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordocs Israel FCKeditor Shell Upload

---------------------------------------------------------------- Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: Wordocs Israel FCKeditor Shell Upload Disclosure Vulnerabilities Google Dork:...

InterPhoto CMS 2.4.0 Shell Upload

Exploit Title: InterPhoto CMS Shell Upload Google Dork: intext:"Created by InterPhoto" Date: 03/09/2012 Exploit Author: NinjaVirus Vendor Homepage: http://www.weensoft.com/ Software Link: http://sourceforge.net/projects/interphoto/files/InterPhoto2.4.0English.rar/download Version: 2.4.0 Tested on...

Silentblast Interactive Shell Upload

-------------------- IN The NAme OF God -------------------- -====CMS Provided by Silentblast Interactive remote file uploader RFU====- Exploit Title:CMS Provided by Silentblast Interactive Exploit Author: FarbodEZRaeL Tested on: Windows xp MAil : [email protected] -====Dork====-...

Byte.am / E-Works.am CMS SQL Injection / LFI / Shell Upload

+-------------------------------------------------------------+ Azerbaijan Black Hatz Presentzz 0day for bitch Armenia --------------------------------------------------------------- Exploit title:Byte.am and e-works.am CMS MULTIPLE VULNERABLITIES Date:18 August 2012 Author: Worm Man Software...

MobileCartly 1.0 - Arbitrary File Upload

MobileCartly 1.0 - Arbitrary File Upload Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on:...

MobileCartly 1.0 Shell Upload

Exploit Title: MobileCartly 1.0 Remote File Upload Vulnerability Google Dork: - Date: 14/08/2012 Exploit Author: ICheerNo0M Vendor Homepage: http://icheernoom.blogspot.com/ Software Link: http://mobilecartly.com/mobilecartly.zip Version: 1.0 Tested on: Ubuntu 10.10 + PHP 5.3.3 1. Vuln Code :...

MobileCarty 1.0 Shell Upload / File Write

Exploit Title: MobileCartly 1.0 Multiple Vulnerabilities Date: 11/08/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link : http://mobilecartly.com/mobilecartly.zip Tested on: Linux/Windows Remote File Upload : just upload shell.php here :...

Traidnt UP CSRF upload shell Vulnerability

Exploit for php platform in category web applications ---------------------------------------------------------------------- Exploit Title: Traidnt UP 0day.today 2018-01-04...

WordPress Easy Comment Uploads Shell Upload

Exploit Title : Wordpress Easy Comment Uploads Shell Upload Vulnerability Author : Nafsh Discovered By : Tapco Security & Research Lab Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 4/8/2012 - 13:33 Source : plugins.svn.wordpress.org/easy-comment-uploads/tags/0.60/upload.php DorK :...

Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities

Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...