onlineer-20.txt

User Name Email Phone Fax Password = ID Next Click "Profile" ajann,Turkey ... Im Not Hacker! --...

TR Forum SQL注入及认证绕过漏洞

Tr Forum是一款法语的论坛程序。 Tr Forum中的多个漏洞允许恶意用户执行SQL注入攻击和绕过某些安全限制。 1 admin/insertadmin.php文件中缺少认证，允许创建拥有有限权限的管理员帐号。 2 没有正确过滤对admin/editer.php文件中id2参数的输入，允许攻击者通过注入任意SQL代码操控SQL查询。成功攻击要求某些管理权限。 3 在更新配置文件时缺少访问验证，允许通过更改id参数修改其他用户的设置。 组合使用1和2所述漏洞允许以完全权限访问管理部分。 Tr Forum Tr Forum 2.0 我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

JaxUltraBB 2.0 - Command Execution

JaxUltraBB 2.0 - Command Execution !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n"; echo "You need a valid Username and Password to get it working\r\n\r\n"; echo "This exploit will try to create a piggymarty.php backdoor on the...

Def-Blog <= v1.0.1 (article) Remote SQL Injection Exploit

============================================================================================== DigitalHive = v2.0 RC2 page Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

DigitalHive <= v2.0 RC2 (page) Remote File Inclusion Exploit

============================================================================================== DigitalHive = v2.0 RC2 page Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

DigitalHive 2.0 RC2 - base_include.php Remote File Inclusion

DigitalHive 2.0 RC2 - baseinclude.php Remote File Inclusion ============================================================================================== DigitalHive ================================================================================================ Exploit :...

DayfoxBlogv2.0.txt

BiyoSecurity.Org script name : Dayfox Blog v2.0 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim Vulnerable files : adminlog.php postblog.php index.php index2.php Vulnerable code : includeonce $sloginpath . "/sloginlib.inc.php"; includeonce $sloginpath . "/header.inc.php"; Exploit :...

Dayfox Blog v2.0 Remote file include

BiyoSecurity.Org script name : Dayfox Blog v2.0 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim Vulnerable files : adminlog.php postblog.php index.php index2.php Vulnerable code : includeonce $sloginpath . "/sloginlib.inc.php"; includeonce $sloginpath . "/header.inc.php"; Exploit :...

lesvisit (visiteurs) <= v2.0 (lvc_include_dir) Remote File Include Vulnerability

============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...

Les Visiteurs (Visitors) <= 2.0 (config.inc.php) File Include Vulnerability

No description provided by source. ============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================...

A-Blog v2.0 Remote File Include

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

Les Visiteurs (Visitors) 2.0 - config.inc.php File Inclusion

Les Visiteurs Visitors 2.0 - config.inc.php File Inclusion ============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability...

A-Blog 2.0 Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= A-Blog 2.0 Multiple Remote File Include Vulnerabilities =======================================================...

A-Blog 2.0 - Multiple Remote File Inclusions

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

Techno Dreams Articles&Papers Package <=v2.0(ArticlesTableview.asp) Remote SQL Injection Vulnerability

Vulnerability Report Title : Techno Dreams Articles&Papers Package =v2.0ArticlesTableview.asp Remote SQL Injection Vulnerability Author : ajann Script Page : http://www.t-dreams.com Exploit; http://target/path/ArticlesTableview.asp?key='SQL HERE Example:...

ClickBlog! <= v2.0 (default.asp) Admin ByPASS SQL Injection

ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...

clickblog20.txt

ENGLISH Title : ClickBlog! = v2.0 default.asp Admin ByPASS SQL Injection Author : ajann Exploit; //Before join login page http://target/path/default.asp Username : ' or ' Password : ' or ' and Login Ok ajann,Turkey...

trforum20.txt

!/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......: acid-root.new.fr/poc/10060903.txt...

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

Exploit for unknown platform in category web applications ================================================================ Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit ================================================================ !/usr/bin/perl Affected.scr..: Tr Forum V2.0...

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...