work system E-Commerce 3.0.5 - Remote File Inclusion

work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...

vhostadmin 0.1 (MODULES_DIR) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ vhostadmin 0.1 MODULESDIR Remote File Inclusion Vulnerability ================================================================ | | \ | Dr Max Virus | / \ | | / / || \ / ...

TorrentFlux 2.2 (maketorrent.php) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================== TorrentFlux 2.2 maketorrent.php Remote Command Execution Exploit ================================================================== The variable announce in maketorrent.php...

paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection

paFileDB 3.5.23.5.3 - Remote Authentication Bypass SQL Injection PafileDB Login SQL injection = author : koray & [email protected] Risk : High Class : Remote Vulnerable Script : pafileDB Version : 3.5.2 / 3.5.3 google : powered by pafiledb 3.5.3/2 greetz : www.cigicigi.net & redhackers Vulnerabl...

PHP: Integer overflow

Background PHP is a widely-used general-purpose scripting language that is especially suited for Web development and can be embedded into HTML. Description A flaw in the PHP memory handling routines allows an unserialize call to be executed on non-allocated memory due to a previous integer...

PHPEasyData Pro 2.2.2 - 'index.php' SQL Injection

exploit3.asp 'Note : If Wrong Id = "CTYPE html PUBLIC..... see" 'Using : Write Target and ID after Submit Click '=============================================================================================== % 37","" guvenlik = Replaceguvenlik,"37","" guvenlik = Replaceguvenlik,"","" End Functio...

PHPCards-1.3.txt

===================================================================== PHP Cards = 1.3 Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download Script :...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

Phaos 0.9.2 - 'basename()' Remote Command Execution

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX,...

SQL-Injection in xoops myAds module

Advisory : SQL-Injection in xoops myAds module Home Page: http://www.xoops.org/ Уязвимость/Vulnerability: SQL-injection Уязвимый скрипт/Vulnerable script: annonces-p-f.php...

abi06.txt

Discoverer: m07hm4n Target: International Chamber of E-Commerce Homepage: http://www.chamberecommerce.com Vulnerable script: /memberlogin.asp Type of "attack": Basic SQL Injection Authentication Bypass Example: In the password field just type: "a' or 'a'='a" without double-quotes. Greetz to:...

DoceboLms 2.0.5 - help.php Remote File Inclusion

DoceboLms 2.0.5 - help.php Remote File Inclusion Vulnerable Script: Docebo LMS 2.05 Discovered: beford Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php =...

DoceboLms 2.0.5 - 'help.php' Remote File Inclusion

Vulnerable Script: Docebo LMS 2.05 Discovered: beford Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php = include$GET'lang'.'/language.php';...

Sql-injection in RW: Download V 4.0.5

Advisory: Sql-injection in RW: Download V 4.0.5 Уязвимый скрипт/Vulnerable script: index.php SQL-inlections: http://www.strategycore.co.uk/files/index.php?cid=' http://www.strategycore.co.uk/files/index.php?dlid=' http://www.strategycore.co.uk/files/index.php?ACT=dl&id=' Раскрытие установочного...

SQL-Injection in AutorankPhp 2.0.2

Advisory: SQL-Injection in AutorankPhp 2.0.2 Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: search.php Exploit: http://www.teifa.net/rank/search.php?key=scriptalert/script&cat=Overall Уязвимость/Vulnerability: SQL-injection Уязвимый...

Sql-injection in PollPro Version 4

Advisory: Sql-injection in PollPro Version 4 Довольно популярный скрипт для голосований. Уязвимый скрипт/Vulnerable script: previouspoll.asp SQL-inlections: http://www.codefixer.com/poll/previouspoll.asp?pollID=36' -------------------------- Cyber Lords Team www.cyberlords.net...

XSS in Calendar Event 3.0

Advisory: XSS in Calendar Event 3.0 Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php http://demo.comdevweb.com/calendar/index.php?calview=year&year=2007"scriptalert/script" -------------------------- Cyber Lords Team...

[eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability

New eVuln Advisory: DSCounter 'X-Forwarded-For' SQL Injection Vulnerability http://evuln.com/vulns/98/summary.html --------------------Summary---------------- eVuln ID: EV0098 CVE: CVE-2006-1234 Software: DSCounter Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.2 Critical Level: Moderate...

XSS in YaWPS 0.61

Advisory: XSS in YaWPS 0.61 Home Page: http://yawps.sourceforge.net/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: topics.cgi, forum.cgi http://www.karadesign.com/cgi-bin/yawps/topics.cgi?op=viewcat;cat=graphics"scriptalert/script"...

D3JeebSQL.txt

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...