LionWiki 3.X (index.php) Shell Upload Vulnerability

Exploit for php platform in category web applications =================================================== LionWiki 3.X index.php Shell Upload Vulnerability =================================================== Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author:...

LionWiki 3.x - 'index.php' Arbitrary File Upload

Exploit Title: LionWiki 3.X index.php upload shell Date: monday 05 april 2010 Author: ayastar Software Link: http://lionwiki.0o.cz Version: 3.X Tested on: ubuntu 9.10 english CVE : yes Code : exploit code hi brother's and all muslims this is my first bug : dork : "powered by LionWiki " exploit :...

Kwik Pay Payroll 4.10.3 Proof Of Concept

Exploit Title: Kwik Pay Payroll .mdb Crash PoC Date: April 1, 2010 Version: 4.10.3 Tested on: Windows XP SP3 Cost: 100.00 AU Author: chap0 Email: chap0x90atgmaildotcom Site: http://www.setfreesecurity.com Usage: Run Script, Open the program File - Import Payroll Data Select From Data Source...

DAFFTIN Password Keeper 1.0.0.15 POC

Exploit for windows platform in category dos / poc Exploit Title: DAFFTIN Password Keeper 1.0.0.15 Date: 01/04/2010 Author: Richard leahy Software Link: http://www.soft32.com/download222389.html Version: 1.0.0.15 Platform Tested on: Windows Xp Sp3 & Sp2 code !/usr/bin/env ruby test = "A" 800000...

CompleteFTP Directory Traversal

Exploit Title: CompleteFTP Server Directory Traversal Date: 2010-03-30 Author: zombiefx [email protected] Software Link: http://www.enterprisedt.com/products/completeftp/download/CompleteFTPSetup.exe Version: CompleteFTP Server v 3.3.0 Tested on: Windows XP SP3 CVE : Code : 230 User test logged...

Cross site scripting

Cross-site scripting XSS vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a "custom block title interface."...

CVE-2010-1107

Cross-site scripting XSS vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a "custom block title interface."...

win32 MessageBox (Metasploit module) shellcode

Exploit for win32 platform in category shellcode ============================================== win32 MessageBox Metasploit module shellcode ============================================== $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file ...

Shellcode - Win32 MessageBox Metasploit module

Shellcode - Win32 MessageBox Metasploit module. Shellcode exploit for win32 platform $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file in framework3/modules/payloads/singles/windows folder Usage : ./msfpayload windows/messagebox...

vBulletin Blog 4.0.2 - Title Cross-Site Scripting

vBulletin Blog 4.0.2 - Title Cross-Site Scripting Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, ...

Zephyrus CMS - index.php SQL Injection

Zephyrus CMS - index.php SQL Injection ==================================================== Zephyrus CMS index.php SQL Injection Vulnerability ==================================================== + Discovered by: Phenom + My id: http://inj3ct0r.com/author/2157 + Original:...

Uiga Fan Club - SQL Injection

Exploit Title: Uiga Fan Club SQL Injection Vulnerability Date: 22/03/2010 Author: Sioma Labs Site : http://www.scriptdevelopers.net/products/ufc.html Software Link: http://www.scriptdevelopers.net/download/uigafanclub.zip Version: N/A Tested on: Win Wamp CVE : N/A / / / | | \ | |/ | ' \ / | / / /...

Internet Explorer Popup Title Bar Spoofing (CVE-2005-0500)

Microsoft Internet Explorer is a popular, all-purpose browser, bundled with the Microsoft Windows operating systems. Microsoft Internet Explorer IE 6 Service Pack 2 is a release with major security enhancements. One of the new security features is the way IE displays text in the title bar for...

Google Chrome 4.0.249 - XML Denial of Service (PoC)

Google Chrome 4.0.249 - XML Denial of Service PoC Exploit Title: Google Chrome 4.0.249 XML PoC Date: 3/6/2009 Author: Blade Software Link: www.google.com Version: 4.0.249.89 Tested on: Attached CVE : Code : Stack Overflow caused by long malformed string inside XML Tags Tested on Windows 7 64bit...

phpAutoVideo - Cross-Site Request Forgery

phpAutoVideo - Cross-Site Request Forgery Exploit Title: phpAutoVideo csrf SoftWare:https://secure.agaresmedia.com/v6/products/phpautovideo Dork: Copyright Agares Media phpautovideo Author: GoLdeN-z3r0 ----------------------------------------------------------------- | PoC : |...

Trade Manager Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

vBulletin 3.5.2 - Cross-Site Scripting

vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...

vBulletin v3.5.2 XSS Vulnerabilities

Exploit for unknown platform in category web applications ==================================== vBulletin v3.5.2 XSS Vulnerabilities ==================================== Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 3.5.2...

VideoDB version 3.0.3 XSS Vulnerability

Exploit for unknown platform in category web applications ======================================= VideoDB version 3.0.3 XSS Vulnerability ======================================= Exploit Title: Permanent Cross-Site Scripting XSS in videoDB 3.0.3 Date: 2010-02-07 Author: vr Software Link:...

MASA2EL Music City v1.0 Remote Sql Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== MASA2EL Music City v1.0 Remote Sql Injection Vulnerability ==========================================================...