pozscripts-sql.txt

|| | | Classified Ads cid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.pozscripts.com/productdetails.php?categoryid=0&itemid=5 | |...

MS Internet Explorer .ANI files handling Universal Exploit (MS05-002)

No description provided by source. / Added string.h /str0ke / / HOD-ms05002-ani-expl.c: 2005-01-10: PUBLIC v.0.2 Copyright c 2004-2005 houseofdabus. MS05-002 Microsoft Internet Explorer .ANI Files Handling Exploit CAN-2004-1049 .:: houseofdabus ::. universal -- for all affected systems...

phpWebNews 0.2 MySQL Edition (id_kat) SQL Injection Vulnerability

No description provided by source. / | | \ | | | | \ \ / / | |/ | | | / | | | | | | | |\ V / | | | | '/ |/ \ | | / | '/ | | || | | |\ | || | | | | | | || | | \ \ / | | | | | | | |/|| |,||| ||/ ,|| |/|||/|| , | ---------------------------------------------------------------------------|/...

Catviz 0.4.0 beta1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Catviz 0.4.0 beta1 SQL Injection Vulnerability Bug by: h0yt3r Dork: n/a Homepage: catviz.sourceforge.net This CMS suffers from some not correctly verified variables which are used in SQL Querys. An Attacker can easily get sensitive information from the database ...

otmanager-lfixss.txt

=========================================================== OTManager CMS LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Drinks Complete Website 2.1.0 (drinkid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Drinks Complete Website 2.1.0 drinkid SQL Injection Vulnerability ===================================================================...

FOG Forum 0.8.1 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= FOG Forum 0.8.1 Multiple Local File Inclusion Vulnerabilities ============================================================= =====================================================...

[ECHO_ADV_96$2008] HiveMaker Professional <= 1.0.2 (cid) Sql Injection Vulnerability

ECHOADV96$2008 ----------------------------------------------------------------------------------------- ECHOADV96$2008 HiveMaker Professional = 1.0.2 cid Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

Security policy new angle: a closer look at local permissions of the contention-vulnerability warning-the black bar safety net

We know that the Administrators in order to ensure that the terminal computer security, will be the bulk of the terminal to be limiting, and some even only open 8 0 port, simple web browsing, which need for some special operation or installation of the software needs friends, because you do not...

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure

MiniBB 2.2 - Cross-Site Scripting SQL Injection Full Path Disclosure Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On...

PostNuke Module PostSchedule 1.0 - eid SQL Injection

PostNuke Module PostSchedule 1.0 - eid SQL Injection Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln:...

Blog PixelMotion - 'modif_config.php' Arbitrary File Upload

------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er --- ------------------------------------------------------------------------- Author : jiko jiki team email : [email protected] Home : www.no-back.org Script : Blog PixelMotion Bug : Remote File...

RunCMS Module bamagalerie3 Remote SQL Injection Vulnerability

No description provided by source. RUNCMS 1.1A : bamagalerie3 Module Remote SQL Injection's cid Script Page : http://runcms.org/ ---------------------------------------------------------- AUTHOR : DreamTurk Exploit coded and founded by DreamTurk : [email protected]...

CenterIM <= 4.22.3 Remote Command Execution Vulnerability:

Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bug 2 Exploit ======= 1 Bug ======= Received...

MiniWebsvr 0.0.9a - Remote Directory Traversal

MiniWebsvr 0.0.9a - Remote Directory Traversal import socket import sys print '---------------------------------------------------------' print 'MiniWebSvr 0.0.9a Directory Transversal Vulnerability' print 'Project URL: http://miniwebsvr.sourceforge.net/' print 'Author: gbr' print 'Tested on...

phpuserbase-lfi.txt

Author : BeyazKurt - [email protected] Script : php User Base 1.3b Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=200632 File : include/unverified.inc.php Code : Exploit : Vuln.Com/include/unverified.inc.php?template=CODE ----------------------------...

phpnukeokul-sql.txt

=-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-= PHP-NUKE Modules Okul v1.0 Remote SQL Injection =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-= Found: xoron contact: [email protected] only e-mail...

Journalness <= 4.1 (last_module) Remote Code Execution exploit

No description provided by source. !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness = 4.1 Remote Code Execution exploit By Iron - randombase.com Greets to everyo...

allclub-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS No go on the hack attempt."; // log attempt, from IP, etc. if $SYSSET'banattackip' // ban ip if banattackip die; $sth = $dbh-prepare"SELECT FROM accmsmodules WHERE name='$name'"; ... Stripslashes function only...

XZeroScripts XZero Community Classifieds 本地文件包含漏洞

BUGTRAQ ID: 27041 CNCAN ID:CNCAN-2007122808 XZeroScripts XZero Community Classifieds是一款基于PHP的WEB应用程序。 XZeroScripts XZero Community Classifieds不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交包含多个\"../\"字符作为参数数据，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 XZeroScripts XZero Community...