1407 matches found
sportsclubs-delete.txt
!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...
krate-sqlxss.txt
================================================================================ || K-Rate SQL-INJECTION, XSS ================================================================================ Application: K-Rate ------------ Website: http://turn-k.net/k-rate -------- Demo: http://kratedemo.com ---...
k-rate - SQL Injection Cross-Site Scripting
k-rate - SQL Injection Cross-Site Scripting ================================================================================ || K-Rate SQL-INJECTION, XSS ================================================================================ Application: K-Rate ------------ Website:...
K-Rate (SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================ K-Rate SQL/XSS Multiple Remote Vulnerabilities ================================================ ================================================================================ || K-Rate...
OneNews Beta 2 Multiple Vulnerabilities
/////////////// Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1. XSS and html...
onenews Beta 2 - Cross-Site Scripting HTML Injection SQL Injection
onenews Beta 2 - Cross-Site Scripting HTML Injection SQL Injection ///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz :...
onenews Beta 2 - Cross-Site Scripting / HTML Injection / SQL Injection
///////////////\\\\\\\\ Name : OneNews Beta 2 Multiple Vulnerabilities Author : suN8HclfcrimsoNLoyd9, DaRk-CodeRs Group Source : http://sourceforge.net/project/showfiles.php?groupid=193198 Dork : Powered by One-News Greetz : all DaRk-CodeRs guys, e.wiZz, str0ke ========================== |1...
TWiki 4.2.0 (configure) Remote File Disclosure Vulnerability
No description provided by source. TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes Local : No Dat...
twiki-disclose.txt
TWiki 4.2.0 File Disclosure Vuln configure "We're brazilian newbies!!! :p" - Th1nk3r Info ---------------------------------------------------------------------------------------------------------------- Classe : Input Validation Error Remote : Yes Local : No Date : 05/08/2008 Credits : Th1nk3r...
PHPX 3.5.16 Cookie Poisoning and Login Bypass Vulnerability
No description provided by source. ======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypa...
Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit
No description provided by source. ?php / ---------------------------------------------------------------------- Coppermine Photo Gallery = 1.4.18 LFI / Remote Code Execution Exploit ---------------------------------------------------------------------- author...: EgiX mail.....:...
ABG Blocking Script 1.0a (abg_path) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...
ABG Blocking Script 1.0a - abg_path Remote File Inclusion
ABG Blocking Script 1.0a - abgpath Remote File Inclusion ================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com...
abg-rfi.txt
================================================================= ========Africa Be Gone version 1.0a Remote File Inclusion======== ================================================================= Vendor: http://www.africabegone.com Download:...
PHPX 3.5.16 - Cookie Poisoning / Authentication Bypass
======================================================================= = gnix = gnixmail at gmail dot com http://gnix.netsons.org Application: phpx http://www.phpx.org/project.php stable version Versions: 3.5.16 Platforms: All Bug: Cookie poisoning / Login bypass Date: 31 July 2008...
Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is...
Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution
authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$", $GET'lang' ? $GET'lang' : $CONFIG'lang'; 306. 307. 308. if isset$USER'lang' &&...
sebraccms-sql.txt
Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. This allows login access without prop...
Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
PHPmotion <= 2.0 (update_profile.php) Remote Shell Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- PHPmotion = 2.0 updateprofile.php Remote Shell Upload Exploit ----------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...