DesktopOnNet 3 Beta9 Local File Inclusion

DesktopOnNet 3 Beta9 Local File Include Vulnerability 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

FCKEditor 2.0 RC3 Shell Upload

FCKEditor Shell Upload Exploit ------------------------------ Web-App: FCKEditor. Version: Version 2.0 RC3 Release Candidate 3. Link : http://sourceforge.net/projects/fckeditor/files/FCKeditor/ Author : Aodrulez. Email : [email protected] Vulnerable File : -----------------...

PhpMyLogon 2 SQL Injection

Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the following for the username to login as the...

PhpMyLogon 2.0 - SQL Injection

Exploit Title: PhpMyLogon SQL Injection Date: March 14, 2010 Author: Blake Software Link: http://sourceforge.net/projects/phpmylogon/files/PhpMyLogon/PhpMyLogon%202/phpmylogon2.zip/download Version: 2 Tested on: Windows XP SP3 Proof of Concept: Enter the following for the username to login as the...

DesktopOnNet 3 Beta9 - Local File Inclusion

DesktopOnNet 3 Beta9 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: http://sourceforge.net/projects/don3/files/ x Code in DON3/applications/don3toolbox.don3app/don3toolbox.php require"appfiles/languages/$don3lang.php"; --- LFI if !fileexists'library/don3toolbox.don3lib'...

DesktopOnNet 3 Beta9 - Local File Inclusion

DesktopOnNet 3 Beta9 - Local File Inclusion + DesktopOnNet 3 Beta9 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: http://sourceforge.net/projects/don3/files/ x Code in DON3/applications/don3toolbox.don3app/don3toolbox.php require"appfiles/languages/$don3lang.php"; --- LFI i...

HoMaP-CMS 0.1 (index.php go) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability ======================================================== Exploit Title: HoMaP-CMS 0.1 index.php go SQL Injection Vulnerability...

Media Player classic StatsReader - '.stats' Stack Buffer Overflow (PoC)

!/usr/bin/python Media Player classic StatsReader .stats file stack buffer Overflow poc Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html Tested in : Windows XP SP3 Credit : ItSecTeam mail : [email protected] Web: WwW.ITSecTeam.com Found by: PLATEN @ ItSecTeam...

Httpdx v1.5.3 Remote Break Server HTTP

Exploit for windows platform in category dos / poc ====================================================================== httpdx v1.5.3 PNG File Handling Remote Denial of Service Vulnerability ====================================================================== Vulnerable: httpdx httpdx 1.5.3...

Gallery Search Engine Cross-Site Scripting (CVE-2003-0614)

A Cross Site scripting XSS security breach is exploited by an attacker inserting specially crafted code to unfiltered input fields in web applications. Sourceforge's "Gallery" is prone to a cross site scripting vulnerability in the "serch.php" script. Depending on the script executed, the victim'...

ONECMS v2.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================= ONECMS v2.5 SQL Injection Vulnerability ======================================= Exploit Title: ONECMS v2.5 SQL INJECTION Date: 05.03.2010 Author: Ctacok and .:melkiy:. Software Link:...

Open Educational System 0.1b Remote File Inclusion

OES Open Educational System isAdmin=true; $myMod-getTemplate; $myMod-debug=0; // Dynamic assignment the template variable $myMod-assign 'MODURL1', $URLQUERY.'|'.$myMod-getLangVAR'LANG=ICONNAME1'.'&action=post&posted=true' ; $myMod-assign 'JAVAIMAG',...

Project Man 1.0 SQL Injection

Project Man Download: http://sourceforge.net/projects/projectman1/files/ PoC: Project Manpath/login.php Username: ' or '1=1 password: ' or '1=1...

phpCDB 1.0 Local File Inclusion

phpCDB Download: http://sourceforge.net/projects/phpcdb/files/ PoC: phpcdbpath/firstvisit.php?langglobal=LFI%00 phpcdbpath/newfolder.php?langglobal=LFI%00 phpcdbpath/showfolders.php?langglobal=LFI%00 phpcdbpath/newlang.php?langglobal=LFI%00 phpcdbpath/showinnerfolder.php?langglobal=LFI%00...

Project Man <= 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Project Man = 1.0 Auth Bypass SQL Injection Vulnerability ============================================================ Project Man = 1.0 Auth Bypass SQL Injection Vulnerability...

phpCDB 1.0 - Local File Inclusion

phpCDB 1.0 - Local File Inclusion phpCDB Download: http://sourceforge.net/projects/phpcdb/files/ PoC: phpcdbpath/firstvisit.php?langglobal=LFI%00 phpcdbpath/newfolder.php?langglobal=LFI%00 phpcdbpath/showfolders.php?langglobal=LFI%00 phpcdbpath/newlang.php?langglobal=LFI%00...

phpCDB <= 1.0 Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================== phpCDB = 1.0 Local File Include Vulnerability ============================================== phpCDB = 1.0 Local File Include Vulnerability Download: http://sourceforge.net/projects/phpcdb/file...

Project Man 1.0 - Authentication Bypass

Project Man Download: http://sourceforge.net/projects/projectman1/files/ PoC: Project Manpath/login.php Username: ' or '1=1 password: ' or '1=1...

ProMan 0.1.1 - Multiple File Inclusions

ProMan 0.1.1 - Multiple File Inclusions ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI:...

phpRAINCHECK 1.0.1 - SQL Injection

phpRAINCHECK 1.0.1 - SQL Injection phpRAINCHECK Download: http://sourceforge.net/projects/phpraincheck/files/ PoC: phpRAINCHECKpath/printraincheck.php?id=SQL...