EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta Application: EZ-Blog http://sourceforge.net/projects/ez-blog/ Version: Beta 1 Bug: Multiple SQL Injection Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mai...

[ECHO_ADV_103$2009] taifajobs <= 1.0 (jobid) Remote SQL Injection Vulnerability

ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date :...

Golabi CMS Remote File Inclusion

-------------------------------------------------------------------------------- wWw.CrazyAngel.iR - info-AT-CrazyAngel.iR -------------------------------------------------------------------------------- Golabi CMS Remote File Inclusion Vulnerability + Application Info: Name: Golabi CMS Author:...

BannerManager 0.81 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ BannerManager 0.81 Auth Bypass SQL Injection Vulnerability ============================================================ SISTEMA DE BANNER: BannerManager v0.81...

BannerManager 0.81 - Authentication Bypass

SISTEMA DE BANNER: BannerManager v0.81 http://sourceforge.net/projects/bannermanager -------------------------------------- vulnerable: sql injection : Found by: rootzig -------------------------------------- Greetz: Eviwrite :P ------------------- -----------------------------------------...

zFeeder 1.6 Authentication Bypass

-----------------:remote bypass admin panel:----------------- ------------------------------------------------------- script:zfeeder 1.6 ------------------------------------------------------------------ download...

taifajobs 1.0 SQL Injection

ECHOADV103$2009 ----------------------------------------------------------------------------------------- ECHOADV103$2009 taifajobs = 1.0 jobid Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date :...

Enomaly ECP多个安全漏洞

BUGTRAQ ID: 33544 CVECAN ID: CVE-2008-4990,CVE-2009-0390 Enomaly ECP（之前名为Enomalism）是用于管理虚拟机的软件。 ECP的enomalism2.sh中存在多个安全漏洞，本地攻击者可以通过符号链接攻击以root用户权限覆盖任意系统文件、向kill命令注入参数以终止任意进程或向进程发送信号，或导致虚拟机无法启动。 Enomaly Elastic Computing Platform 2.1 临时解决方法： 将PIDFILE从/tmp/enomalism2.pid更改为/var/run/enomalism2.pid。...

Fedora Update for perl-Tk FEDORA-2008-1384

Check for the Version of perl-Tk OpenVAS Vulnerability Test Fedora Update for perl-Tk FEDORA-2008-1384 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

TPTEST <= 3.1.7 Stack Buffer Overflow PoC

No description provided by source. !/usr/local/bin/perl TPTEST = 3.1.7 maby also 5.0.2? tptest.sourceforge.net stackbased buffer overflow poc in server client can also be exploit author: ffwd use IO::Socket;$host,$port=@ARGV; $rem=IO::Socket::INET-newProto="tcp",PeerAddr=$host,PeerPort=$port;...

TPTEST <= 3.1.7 Stack Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ========================================= TPTEST newProto="tcp",PeerAddr=$host,PeerPort=$port; if!$remdie "1\n";$rem-autoflush1; $cookie=$major=$minor="123"; $r=;print "$r";sleep 5; to attach in gdb.. if$r=/cookie=0-9/$cookie=$1;...

Falt4 CMS File Upload Exploit

Falt4 CMS fckeditor Arbitrary File Upload Exploit Bug Discovered By : Sp3shial [email protected] Persian Boys Hacking Team From A Land With A History-Long Background Download CMS : http://downloads.sourceforge.net/falt4/falt4extreme.zip?modtime=1196845455&bigmirror=0 errorreporting0;...

TPTEST 3.1.7 - Stack Buffer Overflow (PoC)

TPTEST 3.1.7 - Stack Buffer Overflow PoC !/usr/local/bin/perl TPTEST newProto="tcp",PeerAddr=$host,PeerPort=$port; if!$remdie "1\n";$rem-autoflush1; $cookie=$major=$minor="123"; $r=;print "$r";sleep 5; to attach in gdb.. if$r=/cookie=0-9/$cookie=$1; if$r=/vmajor=0-9/$major=$1;...

BlueBird Pre-Release (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== BlueBird Pre-Release Auth Bypass SQL Injection Vulnerability ============================================================== 0x01 Informations: Name : BlueBird Pre-Release...

webframe 0.76 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== webframe 0.76 Multiple File Inclusion Vulnerabilities ===================================================== ------------------Rfi/Lfi------------------ script:webframe 0.76...

webframe 0.76 - Multiple File Inclusions

------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...

WikkiTikkiTavi 'upload.php'任意文件上传漏洞

BUGTRAQ ID: 33647 CNCAN ID：CNCAN-2009020702 WikkiTikkiTavi是一款Wiki引擎。 WikkiTikkiTavi 'upload.php'脚本存在漏洞，远程攻击者可以利用漏洞上传任意PHP文件。 攻击者通过上传恶意PHP文件，可导致以WEB权限执行任意命令。 WikkiTikkiTavi 1.11 厂商解决方案 目前供应商没有提供补丁信息： http://tavi.sourceforge.net/...

IF-CMS 2.0 - id Blind SQL Injection

IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...

WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== WikkiTikkiTavi 1.11 Remote PHP File Upload Vulnerability ======================================================== Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net...

WikkiTikkiTavi 1.11 - Arbitrary '.PHP' File Upload

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :WikkiTikkiTavi Site :http://tavi.sourceforge.net http://c4team.org/ taviPATH /upload.php http://c4team.org/ taviPATH img/ shell.php Demo: http://skylined.org/change/tavi/upload.php...