clansphere-disclose.txt

-------------------------------------------------------------- ClanSphere 2007.4.4 Remote File Disclosure Vulnerability. -------------------------------------------------------------- download : http://sourceforge.net/projects/clansphere/ author : p4imi0 contact : [email protected] exploit :...

bubbling library 1.32 - 'uri' Remote File Disclosure

bubbling library v1.32 Remote File Disclosure Vulnerabilities Download script : http://sourceforge.net/project/showfiles.php?groupid=192730 Author : Stack-Terrorist v40 Email : [email protected] Home : http://www.v4-team.com exploit : http://localhost/ script...

Fedora 7 : icu-3.6-20.fc7 (2008-1076)

CVE-2007-4770 & CVE-2007-4771 Flaws in icu regexp handling. Technical details can be found at http://sourceforge.net/mailarchive/message.php?msgname= d03a2ffb0801221538x68825e42xb4a4aaf0fcccecbd%2540mail.gmail.com Note that Tenable Network Security has extracted the preceding description block...

Bubbling Library 1.32 - Multiple Local File Inclusions

Bubbling Library 1.32 - Multiple Local File Inclusions bubbling library v1.32 multiple Local File Inclusion Vulnerabilities Download scrip : http://sourceforge.net/project/showfiles.php?groupid=192730 Author : Stack-Terrorist v40 Email : [email protected] Home : http://www.v4-team.com for execute...

Liquid-Silver CMS 0.1 (update) Local File Inclusion Vulnerability

No description provided by source. Liquid-Silver CMS Local File Inclusion Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=171166 author : Stack-Terrorist v40 foor read a php file ?update=name of file iwthout php for execute exploit does not write extention of file exploit :...

Bubbling Library 1.32 - Multiple Local File Inclusions

bubbling library v1.32 multiple Local File Inclusion Vulnerabilities Download scrip : http://sourceforge.net/project/showfiles.php?groupid=192730 Author : Stack-Terrorist v40 Email : [email protected] Home : http://www.v4-team.com for execute exploit does not write extention of file Other files:...

liquidsilver-lfi.txt

Liquid-Silver CMS Local File Inclusion Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=171166 author : Stack-Terrorist v40 foor read a php file ?update=name of file iwthout php for execute exploit does not write extention of file exploit : /Script/update/index.php?update=/nam...

Liquid-Silver CMS 0.1 - 'update' Local File Inclusion

Liquid-Silver CMS Local File Inclusion Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=171166 author : Stack-Terrorist v40 foor read a php file ?update=name of file iwthout php for execute exploit does not write extention of file exploit : /Script/update/index.php?update=/nam...

LulieBlog 1.02 - SQL Injection

LulieBlog 1.02 - SQL Injection LulieBlog Version 1.02 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://sourceforge.net/project/platformdownload.php?groupid=204083 Injection Adress : http://Sitename/voircom.php?id=SQL CODE SQL CODE :...

Mooseguy Blog System 1.0 (blog.php month) SQL Injection Vulnerability

No description provided by source. MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN";...

Mooseguy Blog System 1.0 - month SQL Injection

Mooseguy Blog System 1.0 - month SQL Injection MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUER...

MiniWeb目录遍历和缓冲区溢出漏洞

MiniWeb是一款WEB服务程序。 MiniWeb不正确处理用户提交的输入，远程攻击者可以利用漏洞进行目录遍历和缓冲区溢出攻击。 如提交如下请求可导致触发漏洞： http://www.example.com/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/boot.ini GET /AAAA...3600 - 4000...AAAA/ HTTP/1.0 Stanley Huang MiniWeb 0.8.19 目前没有解决方案提供： http://sourceforge.net/projects/miniweb...

PHPEcho CMS 2.0 - id SQL Injection

PHPEcho CMS 2.0 - id SQL Injection PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script :...

PHPEcho CMS 2.0 - 'id' SQL Injection

PHPEcho CMS Remote SQL Injection Exploit Product: PHPEchoCM License: GPL For version: 2.0 AUTHOR : Stack-Terrorist v40 HOME : http://v4-team.com EMAIL: [email protected] & [email protected] download script : http://sourceforge.net/project/showfiles.php?groupid=186100 EXPLOITS : username :...

evilboard 0.1a - SQL Injection / Cross-Site Scripting

Title: EvilBoard 0.1a Alpha Multiple Remote Vulnerabilities Author: seaofglass, Download: http://sourceforge.net/projects/evilboard Bug: XSS & Remote Sql Injection Info: EvilBoard is using PHP and mysql. MySite: http://seaofglass.backrush.com bug 1 : XSS PoC...

evilboard-sqlxss.txt

Title: EvilBoard 0.1a Alpha Multiple Remote Vulnerabilities Author: seaofglass, Download: http://sourceforge.net/projects/evilboard Bug: XSS & Remote Sql Injection Info: EvilBoard is using PHP and mysql. MySite: http://seaofglass.backrush.com bug 1 : XSS PoC...

CoolPlayer 2.17 .m3u Playlist Stack Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== CoolPlayer 2.17 .m3u Playlist Stack Overflow Exploit ==================================================== CoolPlayer, Latest Build: 217 Web:: http://coolplayer.sourceforge.net/ Playlist.m3...

AGENCY4NET WEBFTP 1 download2.php File Disclosure Vulnerability

No description provided by source. &nbs...

AGENCY4NET WEBFTP 1 - download2.php File Disclosure

AGENCY4NET WEBFTP 1 - download2.php File Disclosure AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM...

AGENCY4NET WEBFTP 1 - 'download2.php' File Disclosure

AGENCY4NET WEBFTP 1 download2.php Remote File Disclosure Vulnerability http://sourceforge.net/project/platformdownload.php?groupid=206982 POC : /Script/download2.php?file=../../../../../../../../../../../etc/passwd D0rk : : TrYaG-TeaM Tryag.com/cc, H-T Team , RoMaNcYxHaCkEr , Asb-May's Team...