smbind <= v.0.4.7 Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================= smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password...

OneCMS 2.6.1 Cross Site Scripting

Script: OneCMS v 2.6.1 Date: 3-09-2010 Discovered By: anT!-Tr0J4n My Home : www.Dev-PoinT.com Email : [email protected] & [email protected] Software Link:http://sourceforge.net/projects/onecms/files/v2.6.1/OneCMSv2.6.1.zip/download Tested on: Win7/Linux ------------------------------ -ExploiT-...

SMBind 0.4.7 SQL Injection

smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password field: anything Sql query will result like this: SELECT ID FROM users WHERE username = 'admin'; ' A...

XellPlan cms SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== XellPlan cms SQL Injection Vulnerability ======================================== 010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 2010 1 0 0...

SnackAmp 3.1.2 SMP Buffer Overflow

Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability SEH Date: 08/28/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.2 Tested on: Windows XP SP3 EN CVE: N/A Shoutz to MC, Thanks bro! ! /usr/bin/env ruby nSE...

SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability (SEH)

Exploit for windows platform in category local exploits ================================================================ SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability SEH ================================================================ Exploit Title: SnackAmp 3.1.2 Malicious SMP Buff...

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking

Media Player Classic 1.3.2189.0 - iacenc.dll DLL Hijacking / Mediaplayer Classic 1.3.2189.0 Dll Hijack Exploit By: Encrypt3d.M!nd Date: 25\8\2010 Download: http://mpc-hc.sourceforge.net/ Details: Compile the following code and rename it to iacenc.dll and place file with one of the affected types ...

ClanSphere 2010 - Multiple Vulnerabilities

ClanSphere 2010 - Multiple Vulnerabilities Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : [email protected] Software Link: Download:http: http://sourceforge.net/projects/clansphere/ Version: all Tested on: WinXp sp3 Risk : HIGHT...

ClanSphere 2010 - Multiple Vulnerabilities

Exploit Title: Clansphere Multiple vulnerabilities Date: 24/08/2010 Author: Sweet Contact : [email protected] Software Link: Download:http: http://sourceforge.net/projects/clansphere/ Version: all Tested on: WinXp sp3 Risk : HIGHT...

MicroP malicious mppl Buffer Overflow Vulnerability

Exploit for windows platform in category local exploits =================================================== MicroP malicious mppl Buffer Overflow Vulnerability =================================================== Exploit Title: MicroP malicious MPPL Buffer Overflow Author: james AT...

SOMPL Music Player v1.0 (.m3u) Local Buffer Overflow (SEH)

Exploit for windows platform in category local exploits ========================================================== SOMPL Music Player v1.0 .m3u Local Buffer Overflow SEH ========================================================== Exploit Title: SOMPL Music Player v1.0 .m3u Local Buffer Overflow SE...

phpMUR - Remote File Disclosure

Exploit Title: phpMUR Remote File Disclosure Date: 10/08/2010 Author: Offensive [email protected] Red-Stone On Inject0r Community ! Software Link: http://sourceforge.net/projects/phpmur Version : n/a Tested on: Windows XP C0nditi0ns : PHP Version 4.x.x Exploit Code :...

Fat Player 0.6b - &#039;.WAV&#039; File Processing Buffer Overflow (SEH)

Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party information. Reference: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4962...

SimpleID 'index.php' Cross Site Scripting Vulnerability

This host is running SimpleID and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsimpleidxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SimpleID 'index.php' Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright C 2010 Greenbone Networks Gmb...

ExtCalendar 2 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== ExtCalendar 2 Blind SQL Injection Vulnerability =============================================== ========================================================== Date: 30/07/2010 Author : Lagripe-Dz...

nuBuilder 10.04.x Remote File Inclusion

Software: nuBuilder 10.04.x and lowermaybe? Type: Remote File Inclusion Download: http://sourceforge.net/projects/nubuilder/files/ Author: Ahlspiess Email: [email protected] Vulnerable file: report.php report.php file content 1 ?php 2 / 3 File: report.php 4 Author: nuSoftware 5 Created:...

nuBuilder 10.04.20 - Local File Inclusion

nuBuilder 10.04.20 - Local File Inclusion ------------------------------------------------------------------------ Software................nuBuilder 10.04.20 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/nubuilder/files/ Release...

NetworX 1.0.3 Shell Upload

------------------------------------------------------------------------ Software................NetworX 1.0.3 Vulnerability...........Arbitrary Upload Download................http://sourceforge.net/projects/networx/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

Wiki Web Help 'getpage.php' SQL Injection Vulnerability

Wiki Web Help is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the...

NetworX 1.0.3 Cross Site Scripting

------------------------------------------------------------------------ Software................NetworX 1.0.3 Vulnerability...........Reflected XSS Download................http://sourceforge.net/projects/networx/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...