MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...

phpcrs 2.06 - importFunction Local File Inclusion

phpcrs 2.06 - importFunction Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154...

LoudBlog 0.8.0a - ajax.php SQL Injection

LoudBlog 0.8.0a - ajax.php SQL Injection !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use...

phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpcrs = 2.06 importFunction Local File Inclusion Vulnerability ==================================================================...

phpcrs-lfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...

phpcrs 2.06 - 'importFunction' Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

!/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgent; use Digest::MD5 qwmd5hex; $ua =...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x ...

IP Reg &lt;= 0.4 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...

phsBlog 0.2 - Bypass SQL Injection Filtering

phsBlog 0.2 - Bypass SQL Injection Filtering !/usr/bin/perl ---------------------------------------------------------------- Script : PhsBlog v0.2 Type : Bypass Sql injection Filtering Exploit Method : GET Risk : High ---------------------------------------------------------------- Discovered by ...

Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection

!/usr/bin/perl ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Multiple Vulnerabilities Xss/Login Bypass/Sql injection Exploit/File Disclosure Method : GET Alert : High Google Dork : "100% | 50% | 25%" "Back to gallery" inurl:"show.php?imageid="...

Samsung DVR SHR2040 - HTTPd Remote Denial of Service Denial of Service (PoC)

!/usr/bin/perl -w Samsung DVR SHR2040 HTTPD Remote Denial of Service DoS PoC The vulnerability is caused due to an unspecified error in the cgis files filter used for configure propierties. This can be exploited by sending a specially crafted HTTP request NO necessary authentication, which will...

Pligg <= 9.9.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ Pligg new; $http-agent'Mozilla/5.0 Windows; U; Windows NT 5.1; en-US; rv:1.9.0.1 Gecko/2008070208 Firefox/3.0.1'; $http-envproxy; cookiejar; my $host = $args'h' || usage; Host flag. Specify the...

e107 Plugin BLOG Engine 2.2 - Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - Blind SQL Injection !/usr/bin/perl e107 Plugin BLOG Engine v2.2 Blind SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members ...

[SECURITY] Fedora 9 Update: sipp-3.1-2.fc9

SIPp is a free Open Source test tool / traffic generator for the SIP protoc ol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking

IceBB 1.0-RC9.2 - Blind SQL Injection Session Hijacking Author: GiReX 26/07/08 Homepage: girex.altervista.org CMS: IceBB ...

Pubs Black Cat [The Fun] - browse.groups.php SQL Injection

Pubs Black Cat The Fun - browse.groups.php SQL Injection source: https://www.securityfocus.com/bid/30221/info Pubs Black Cat The Fun is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

No description provided by source. =========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability =========================================================================== ,--^----------,--------,-----,-------^--...