Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit

Exploit for unknown platform in category web applications ============================================================== Wordpress 2.6.1 SQL Column Truncation Admin Takeover Exploit ============================================================== !/usr/bin/php =5.2.1 you'll need to be as well, in...

wordpress261-admin.txt

!/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin takeover, iso 0808\n"; if!$BLOG echo "! Usage:...

WordPress 2.6.1 - Admin Takeover (SQL Column Truncation)

WordPress 2.6.1 - Admin Takeover SQL Column Truncation !/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin...

GLSA-200809-04 : MySQL: Privilege bypass

The remote host is affected by the vulnerability described in GLSA-200809-04 MySQL: Privilege bypass Sergei Golubchik reported that MySQL imposes no restrictions on the specification of 'DATA DIRECTORY' or 'INDEX DIRECTORY' in SQL 'CREATE TABLE' statements. Impact : An authenticated remote attack...

FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc ADV FreeBSD-SA-04:12.jailroute.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

FreeBSD Security Advisory (FreeBSD-SA-04:12.jailroute.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:12.jailroute.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FreeBSD Security Advisory (FreeBSD-SA-05:13.ipfw.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-05:13.ipfw.asc ADV FreeBSD-SA-05:13.ipfw.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

MySQL: Privilege bypass

Background MySQL is a popular multi-threaded, multi-user SQL server. Description Sergei Golubchik reported that MySQL imposes no restrictions on the specification of "DATA DIRECTORY" or "INDEX DIRECTORY" in SQL "CREATE TABLE" statements. Impact An authenticated remote attacker could create MyISAM...

K-Links Directory Blind SQL Injection Exploit

!/usr/bin/perl K-Links Directory Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 & arashimm02ta...

mysql: privilege escalation via DATA/INDEX DIRECTORY directives

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...

mysql: privilege escalation via DATA/INDEX DIRECTORY directives

MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified 1 DATA DIRECTORY or 2 INDEX DIRECTORY arguments that are within the MySQL home data directory,...

Efestech Shop 2.0 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Efestech Shop 2.0 catid Remote SQL Injection Vulnerability ============================================================= Script : Efestech Shop v2.0 Verz: 2.0 SQL attack ;...

singapore-database.txt

Singapore 0.10.1 Directory Traversal vulnerability/Database credential exploit Discovered by: e.wiZz! Site: madspot.org Info: no info today,sorry :D / Script site: http://www.sgal.org/ Download:...

oxygen-sql.txt

Oxygen 2.0 SQL Injection Vulnerability Bug by: h0yt3r This Board Software suffers from a not correctly verified quote ID variable which is used in SQL Querys. An Attacker can easily get sensitive information from the database by injecting unexpected SQL Querys. We need a valid topic ID. Im not...

Oxygen 2.0 (repquote) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Oxygen 2.0 repquote Remote SQL Injection Vulnerability ======================================================== Oxygen 2.0 SQL Injection Vulnerability Bug by: h0yt3r This Board...

MycroCMS 0.5 Remote Blind SQL Injection Vulnerability

No description provided by source. ======================================================= MycroCMS 0.5 Remote Blind SQL Injection Vulnerability ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

MycroCMS 0.5 - Blind SQL Injection

MycroCMS 0.5 - Blind SQL Injection ======================================================= MycroCMS 0.5 Remote Blind SQL Injection Vulnerability ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

MycroCMS 0.5 - Blind SQL Injection

======================================================= MycroCMS 0.5 Remote Blind SQL Injection Vulnerability ======================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

pSys 0.7.0.a (shownews) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== pSys 0.7.0.a shownews Remote SQL Injection Vulnerability ========================================================== pSys - 0.7.0. alpha shownews SQL Injection Bug by: h0yt3r Bug in...

Weblosninger 4 - Cross-Site Scripting / SQL Injection

Viva IsLaM sql / xss Multiple Vulnerabilities weblosning V1, V2,V3,V4 index2.php id Script Name : Weblosning V1, V2,V3,V4 Demo : http://www.simpelside.dk/ AuTh0r: Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] V1 ::V2 :: V3 :: V4 D0rk : allinurl: "index2.php" mainid ==== SQL :::::::: V1...