LittlePhpGallery 1.0.2 Local File Inclusion

Exploit Title: local file include / File Disclosure Date: topic:littlePhpGallery Author: kire bozorge khavarmiane Software Link: http://brunetton.tuxfamily.org/progs/littlePhpGallery1.0.2.tar.gz Version: 1.0.2 Thanks: shash pashe naneye decoder , kose tange ameye joker,az hame mohem tar kose r jo...

Mediacoder 0.7.5.4797 - '.m3u' Local Buffer Overflow (SEH)

Exploit Title: MediaCoder-0.7.5.4795.exe 0-days Buffer Overflow SEH Date: 02 / 12 / 2010 Author: Oh Yaw Theng Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4795.exe Version: v0.7.5.4795 Latest Version !! Tested on: Microsoft Windows XP SP2 CVE : N / A The vendor is...

Mediacoder 0.7.5.4792 Buffer Overflow

Exploit Title: Mediacoder 0.7.5.4792 SEH Buffer Overflow Exploit Date: 11/29/2010 Author: 0v3r Software Link: http://www.mediacoderhq.com/mirrors.htm?file=MediaCoder-0.7.5.4792.exe Version: 0.7.5.4792 Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python win32bind - EXITFUNC=seh LPORT=4444...

Jurpopage 0.2.0 SQL Injection

========================================================= Jurpopage SQL Injection ========================================================= Exploit Title : Jurpopage SQL Injection Date : 24 Noveber 2010 Author : Suddendeath [email protected] Platform/Tested on: Windows XP 2 SP 2 myweb :...

Hamayesh Sazan Novin (fckeditor) Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ==================================================================== Hamayesh Sazan Novin fckeditor Arbitrary File Upload Vulnerability ==================================================================== Exploit Title: Hamayesh Sazan Novin...

Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure

Web Wiz NewsPad Express Edition 1.03 - Database File Disclosure ============================================================= NewsPad Database Download Vulnerability ============================================================= Exploit Title: NewsPad Database Download Vulnerability Date: 15/11/20...

osCommerce 2.2 - Cross-Site Request Forgery

osCommerce 2.2 - Cross-Site Request Forgery Exploit Title: osCommerce v2.2 Change Admin Pass Date: date Author: daandeveloper33 Software Link: http://oscommerce.com/ Version: v2.2 Tested on: Mac OS X 10.6.4, osCommerce v2.2 RC2A Dutch This is the code that you can execute to change the admin pass...

FileFuzz - Denial of Service

FileFuzz - Denial of Service Exploit Title :Filefuzzer Denial of service vulnerability Software : Filefuzzer Software link :http://labs.idefense.com/software/fuzzing.php Autor : Sweet Email : [email protected] Date : 5/11/2010 Tested on : WinXp sp3 eng | Vmware Software detail: FileFuzz is a...

Dolphin 7.0.3 File Disclosure / SQL Injection

===================================================================== Dolphin Vulnerability SQL Injection / disclosure Vulnerability ===================================================================== || || | || o,7 || . o7 || 4||| ow, : / /...

Simpli Easy Newsletter 4.2 Cross Site Scripting

Simpli Easy AFC Simple Newsletter " method="post" Proof-of-concept: http://www.example.com/cp.php?do="alert1 2. Information Leakage By default, application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt Proof-of-concept: http://www.example.com/el.txt...

GeekLog 1.7.0 - 'FCKeditor' Arbitrary File Upload

db 88 88 ,ad8888ba, d88b 88 88 d8"' "8b d8'8b 88 88 d8' d8' 8b 88aaaaaaaa88 88 d8YaaaaY8b 88""""""""88 88 88888 d8""""""""8b 88 88 Y8, 88 d8' 8b 88 88 Y8a. .a88 d8' 8b 88 88 "Y88888P" Exploit Title: Geeklog Date: 18-10-2010 Author: Kubanezi AHG Software Link: http://www.geeklog.net/ Version: 1.7....

SPAW Editor 2.0.8.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ====================================================== SPAW Editor 2.0.8.1 Local File Inclusion Vulnerability ====================================================== Exploit Title: local file include Date: Author: soorakh kos Software Link:...

Ckfinder remote file Upload Vulnerability

Exploit for php platform in category web applications ========================================= Ckfinder remote file Upload Vulnerability ========================================= Author: Net.Edit0r Dork : inurl:"/ckfinder/ckfinder.html" Software Link: http://www.ckfinder.com/ Platform :linux/php...

SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits ================================================================= SnackAmp 3.1.3B Malicious SMP Buffer Overflow Vulnerability SEH ================================================================= Exploit Title: SnackAmp 3.1.3B Malicious SMP...

WAnewsletter v 2.1.2 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-D...

WAnewsletter 2.1.2 SQL Injection

================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author: [email protected] Software...

WAnewsletter 2.1.2 - SQL Injection

================================================ WAnewsletter v 2.1.2 SQL Injection Vulnerability ================================================ Exploit Title: WAnewsletter v 2.1.2 SQL Injection Vulnerabilitie Date: 23/09/2010 Author: BrOx-Dz Author: [email protected] Software...

Powered by Emanage (install) Change Password Vulnerability

Exploit for php platform in category web applications ========================================================== Powered by Emanage install Change Password Vulnerability ========================================================== Exploit Title: install Change Password Vulnerability Date: 2010-09-2...

Fashione E-Commerce Webshop SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: Fashione E-Commerce Webshop Multiple SQL Injection Vulnerabilities Date: 2010-09-19 Author: secret Contact : [email protected] / ICQ : 17-33-77 Site : swissfaking.net/board Software Link: http://www.fashione.co.uk/ Version: All...

BoutikOne 1.0 - SQL Injection

/ / / / / / / / / / // / / / / ///// // Exploit Title: BoutikOne® v1 list.php SQL Injection Vulnerabilitie Date: 19/09/2010 Author: BrOx-Dz Author: [email protected] Software Link: http://www.boutikone.com/ Dork : Powered by BoutikOne® Version: BoutikOne® Tested on: windows xp pack 3...