Lucene search
+L

3220 matches found

zdt
zdt
added 2007/03/17 12:0 a.m.25 views

Php-Stats <= 0.1.9.1b (php-stats-options.php) admin 2 exec() eExploit

Exploit for unknown platform in category web applications ===================================================================== Php-Stats = 0.1.9.1b php-stats-options.php admin 2 exec eExploit ===================================================================== ?php printr'...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/17 12:0 a.m.24 views

Php-Stats &lt;= 0.1.9.1b (ip) Remote SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b "ip" urldecode/ ereg / sql injection / cleat text admin pass disclosure exploit method ii by rgod mail: retrog at alice dot it site:...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/16 12:0 a.m.14 views

Php-Stats &lt;= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/03/16 12:0 a.m.14 views

PHP-Stats 0.1.9.1b - ip SQL Injection

PHP-Stats 0.1.9.1b - ip SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/03/16 12:0 a.m.33 views

PHP-Stats 0.1.9.1b - PC-REMOTE-ADDR SQL Injection

PHP-Stats 0.1.9.1b - PC-REMOTE-ADDR SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

0.2AI score
SaveExploits0
zdt
zdt
added 2007/03/16 12:0 a.m.46 views

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Php-Stats 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$str...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/03/16 12:0 a.m.41 views

PHP-Stats 0.1.9.1b - 'ip' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function se...

7.5CVSS5.8AI score0.02261EPSS
SaveExploits2
zdt
zdt
added 2007/03/16 12:0 a.m.34 views

Php-Stats <= 0.1.9.1b (ip) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Php-Stats 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/03/16 12:0 a.m.11 views

phpStats 0.1.9 - Multiple SQL Injections

phpStats 0.1.9 - Multiple SQL Injections source: https://www.securityfocus.com/bid/23003/info Php-Stats is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/03/16 12:0 a.m.17 views

phpStats 0.1.9 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/23003/info Php-Stats is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

5.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/03/16 12:0 a.m.37 views

PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...

7.5CVSS5.8AI score0.02261EPSS
SaveExploits2
NVD
NVD
added 2007/03/07 12:19 a.m.12 views

CVE-2007-1299

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

7.5CVSS7.6AI score0.0267EPSS
SaveExploits2References5
Prion
Prion
added 2007/03/07 12:19 a.m.14 views

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

7.5CVSS8AI score0.0267EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2007/03/07 12:0 a.m.22 views

CVE-2007-1299

PHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ipath parameter...

7.6AI score0.0267EPSS
SaveExploits2References5
CVE
CVE
added 2007/03/07 12:0 a.m.59 views

CVE-2007-1299

CVE-2007-1299 concerns PHP remote file inclusion in Mani Stats Reader 1.2 and earlier. The vulnerability resides in index.php: an attacker can supply a URL in the ipath parameter to cause arbitrary PHP code execution on the affected system. The NVD entry confirms the exploitability as network acc...

7.5CVSS7.6AI score0.0267EPSS
SaveExploits2References5Affected Software1
seebug.org
seebug.org
added 2007/03/05 12:0 a.m.79 views

Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability

No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected]...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/03/02 12:0 a.m.42 views

Mani Stats Reader 1.2 - 'ipath' Remote File Inclusion

Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected] milw0rm.com 2007-03-02...

7.5CVSS5.8AI score0.0267EPSS
SaveExploits2
zdt
zdt
added 2007/03/02 12:0 a.m.60 views

Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== Mani Stats Reader = 1.2 ipath Remote File Include Vulnerability ================================================================== Mani Admin Plugin Stats Reader V1.2 rfi :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/03/02 12:0 a.m.67 views

Mani Stats Reader &lt;= 1.2 (ipath) Remote File Include Vulnerability

No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected] milw0rm.com 2007-03-02...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2007/03/02 12:0 a.m.28 views

Mani Stats Reader 1.2 - ipath Remote File Inclusion

Mani Stats Reader 1.2 - ipath Remote File Inclusion Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected] milw0rm.com 2007-03-02...

0.7AI score
SaveExploits0
Rows per page
Query Builder