Envolution 1.1.0 - 'PNSVlang' Remote Code Execution

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon | friend str0ke ; pepi,...

Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ Envolution = 1.1.0 PNSVlang Remote Code Execution Exploit ============================================================ ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...

OWASP JBroFuzz 0.3 Fuzzer Released!

JBroFuzz is an OWASP Project that emerged from penetration testing. It deals with fuzzing stateless network protocols such as HTTP, SOAP, XML, LDAP, etc. Apart from fancy terminology, JBroFuzz 0.3 has inbuilt the following Generators ready to be used: basic cross site scripting checks XSS basic S...

Echo Security Advisory 2006.61

------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad Maulana a.k.a Matdhule Date Found : November, 22nd 2006 Location :...

a-ConMan 3.2b - common.inc.php Remote File Inclusion

a-ConMan 3.2b - common.inc.php Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...

DoSePa 1.0.4 - &#039;textview.php&#039; Information Disclosure

Target: DoSePa 1.0.4 textview.php http://sourceforge.net/project/showfiles.php?groupid=91686 Vulnerability: Information disclosure. Description: The textview.php page in DoSePa does not properly sanitize the $GET'file' value; this allows an attacker to view any file to which the server has read...

ContentNow Directory Traversal&#40;upload.php&#41;

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion 1.2.1 - DIR Remote File Inclusion

Aigaion 1.2.1 - DIR Remote File Inclusion Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

phpwcms <= 1.2.6 (Cookie: wcs_user_lang) Local File Include Exploit

Exploit for unknown platform in category web applications =================================================================== phpwcms = 1.2.6 Cookie: wcsuserlang Local File Include Exploit =================================================================== ? print ' ::::::::: :::::::::: ::: :::...

PHPWCMS 1.2.6 - Cookie: wcs_user_lang Local File Inclusion

DEVIL TEAM IRC: 72.20.18.6:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX, Ci2u,...

[x0n3-h4ck]Drake CMS v 0.2 XSS exploit

-=--------------------ADVISORY-------------------=- Drake CMS V. 0.2 Author: CorryL x0n3-h4ck.org -=-----------------------------------------------=- -=+ Application: Drake CMS -=+ Version: 0.2 -=+ Vendor's URL: https://sourceforge.net/projects/drakecms/ -=+ Platform: WindowsLinuxUnix -=+ Bug typ...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================ Product............: WORK system e-commerce...

WORK System E-Commerce 3.0.1 - Remote File Inclusion

WORK System E-Commerce 3.0.1 - Remote File Inclusion ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability...

Y.A.N.S sql injection

Product: YANS yet another news system Link: http://sourceforge.net/projects/yans/ vuln code: $resultado = mysqlquery"SELECT FROM users WHERE username='$username' AND password='$password'" or die mysqlerror; simple sql injection ' or '1=1 ' or '1=1 -navairum...

vBlog / C12 0.1 (cfgProgDir) Remote File Include Vulnerabilities

No description provided by source. WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :Vortex Blog AKA vBlog Class = Remote File Inclusion ; Download =http://switch.dl.sourceforge.net/sourceforge/c12/C12a0.1nonfunc.zip Found by = Dr.Pantagon [email protected]...

vBlog C12 0.1 - cfgProgDir Remote File Inclusion

vBlog C12 0.1 - cfgProgDir Remote File Inclusion WwW.Deltahacking.NeT Priv8 Site WwW.Deltahacking.Ir Public Site Portal Name :Vortex Blog AKA vBlog Class = Remote File Inclusion ; Download =http://switch.dl.sourceforge.net/sourceforge/c12/C12a0.1nonfunc.zip Found by = Dr.Pantagon...

News publication system remote File include

Software: News publication system -------------------------------- Description: News publication system provides a mechanism for news blocks publication on site in conformity with rules and templates set. Provides a mechanism for adding news to the system and news management. Provides a mechanism...

PHPAdventure 1.1 (ad_main.php) Remote File Include Vulnerability

No description provided by source. D.O.M TEAM Bug found: HER0 cms: PHPAdventure type: rfi risk: High download:http://prdownloads.sourceforge.net/phpadventure/phpadv11.tar.gz contac:[email protected] nota: all the versions of PHPAdventure is affected.. line of the code: ?php $stage = 1;...

scarf.txt

vendor:Someone at Stanford university site:http://sourceforge.net/projects/scarf/ vuln: There is no admin check on the file generaloptions.php So anyone can go in and make some changes. One thing to do would be create a user, then go into general options and change your user to an admin. You can...

Stanford university SCARF user editing

vendor:Someone at Stanford university site:http://sourceforge.net/projects/scarf/ vuln: There is no admin check on the file generaloptions.php So anyone can go in and make some changes. One thing to do would be create a user, then go into general options and change your user to an admin. You can...