TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit

No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype=multipart/form-data Existing User:INPUT name=unamebr INPUT type=file name=userfile style=visibility:HIDDENbr INPUT type=hidden name=email [email protected] input type=hidden...

Re: PHP-Revista Multiple vulnerabilities

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

PHP-Revista RFI / XSS / SQL Injection

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ========================================================================== Symantec Altiris Client Service 6.8.378 Local Privilege Escalation Exploit ========================================================================== // 0day PRIVATE...

Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation

// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...

symantec-escalate.txt

// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...

[Full-disclosure] ssLinks v1.22 Multiple SQL Injection Vulnerabilities

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ ssLinks v1.22 Multiple SQL Injection Vulnerabilities http://scripts.incutio.com/sslinks/...

[Full-disclosure] Autentificator v2.01 SQL Injection Vulnerabilty

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------------------ Autentificator v2.01 SQL Injection http://www.hotscripts.com/Detailed/15291.html ------------------------------------------------------------------------------------...

ajaxchat.txt

Discovered by Sirdarckcat from elhacker.net Ajax Chat http://www.pcdiscs.co.uk/chat/ ============================================== Ajax Chat is a web script for making an online chat based on PHP and AJAX. This has a Remote File Disclosure and a XSS bug...

sqlitewebadmin.txt

Discovered by Sirdarckcat from elhacker.net SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin ============================================== SQLiteWebAdmin is a simple script for managing a DataBase. It has several security bugs. ============================================== Remote...

xprotection110.txt

Discovered by Sirdarckcat from elhacker.net X-Protection 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Protection is a simple script made for protectiong files with a simple file inclusion. There is a SQL injection vulnerability...

xpoll110.txt

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...

xstatics120.txt

Discovered by Sirdarckcat from elhacker.net X-Statics 1.20 http://members.lycos.co.uk/xscripts03/ ============================================== X-Statics is a simple script for making statics of a web site. There is an SQL injection vulnerability ============================================== PO...

[Full-disclosure] SQLiteWebAdmin multiple Vulnerabilities

Discovered by Sirdarckcat from elhacker.net SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin ============================================== SQLiteWebAdmin is a simple script for managing a DataBase. It has several security bugs. ============================================== Remote...

[Full-disclosure] X-Statics 1.20 SQL Injection Vulnerability

Discovered by Sirdarckcat from elhacker.net X-Statics 1.20 http://members.lycos.co.uk/xscripts03/ ============================================== X-Statics is a simple script for making statics of a web site. There is an SQL injection vulnerability ============================================== PO...

TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker

TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...

[Full-disclosure] X-Protection 1.10 SQL Injection Vulnerability

Discovered by Sirdarckcat from elhacker.net X-Protection 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Protection is a simple script made for protectiong files with a simple file inclusion. There is a SQL injection vulnerability...

TinyPHP Forum &lt;= 3.6 (makeadmin) Remote Admin Maker Exploit

No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype="multipart/form-data" Existing User:INPUT name=unamebr INPUT type=file name=userfile style="visibility:HIDDEN"br INPUT type=hidden name=email value="[email protected]" input type=hidden...

[Full-disclosure] X-Poll SQL Injection Vulnerability

Discovered by Sirdarckcat from elhacker.net X-Poll 1.10 http://members.lycos.co.uk/xscripts03/ ============================================== X-Poll is a simple poll maker for simple PHP web sites. This has a SQL Injection vulnerability. ============================================== PoC:...