1407 matches found
Azucar CMS <= 1.3 (admin/index_sitios.php) File Inclusion Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Azucar CMS = 1.3 VIEW Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Affected Softwar...
VerliAdmin <= 0.3 (language.php) Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution Exploit linK : http://bohyn.czechweb.cz/ d0rk: allinurl:verliadmin cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected]...
Cells Blog 3.3 - XSS Reflected & Blind SQLite Injection
No description provided by source. + Exploit: Cells v3.3 XSS Reflected & Blind SQLite Injection + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + version: Cells Blog 3.3 + Vendor Homepage: http://cells.tw + 14/01/2014 vendor contacted + 17/01/2014 no response from vendor +...
WordPress A to Z Category Listing plugin <= 1.3 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress A to Z Category Listing plugin = 1.3 SQL Injection Vulnerability Date: 2011-09-09 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/a-to-z-category-listing.zip Version: 1....
QuickTicket <= 1.5 (qti_usr.php id) SQL Injection Vulnerability
No description provided by source. Script name: QuickTicket Site: http://www.qt-cute.org Vulnerability: remote sql injection at qtiusr.php Download: v 1.4: http://www.qt-cute.org/download/qti14.zip v 1.5.0.3: http://www.qt-cute.org/download/qti15.zip Vulnerable code: 1.4 ; 1.5 is pretty the same ...
phpegasus (fckeditor) Remote Arbitrary File Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- phpegasus fckeditor Remote Arbitrary File Upload Exploit -----------------------------------------------------------------...
hustoj (fckeditor) Remote Arbitrary File Upload Exploit
No description provided by source. ?php / ----------------------------------------------------------------- hustoj fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- Hustoj is HUST ACM OnlineJudge with GNU/GPL v2 License Download :...
LightNEasy Cms 3.2.1 - Blind SQL Injection Vulnerability
No description provided by source. Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127 Version: 3.2....
Newswriter SW <= 1.42 (editfunc.inc.php) File Include Vulnerability
No description provided by source. ============================================================================================== Newswriter SW = 1.42 NWCONFSYSTEMserverpath Remote File Inclusion Vulnerability...
Wordpress Mini Mail Dashboard Widget Plugin 1.36 Remote File Inclusion
No description provided by source. Exploit Title: Mini Mail Dashboard Widget Wordpress plugin RFI Google Dork: inurl:wp-content/plugins/mini-mail-dashboard-widget Date: 09/19/2011 Author: Ben Schmidt supernothing AT spareclockcycles.org @supernothing Software Link:...
WordPress SCORM Cloud plugin <= 1.0.6.6 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress SCORM Cloud plugin = 1.0.6.6 SQL Injection Vulnerability Date: 2011-09-07 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/scormcloud.1.0.6.6.zip Version: 1.0.6.6 tested...
MyAlbum <= 3.02 (language.inc.php) Remote File Inclusion Vulnerability
No description provided by source. ============================================================================================== MyAlbum = 3.02 langsdir Remote File Inclusion Vulnerability =============================================================================================== Critical...
XMB <= 1.9.6 Final basename() Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by XMB\n\n; / works...
Supernews <= 2.6.1 (noticias.php cat) SQL Injection
No description provided by source. Supernews = 2.6.1 noticias.php cat Remote SQL Injection Google Dork: intext:2003 - 2004 : SuperNews : Todos os direitos reservados Bug discovered by Pr0T3cT10n, [email protected] Date: 31/05/2012 Version: 2.6.1 Software Link:...
Unclassified NewsBoard <= 1.6.1 patch 1 Arbitrary Local Inclusion Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Unclassified NewsBoard = 1.6.1 patch 1 ABBCConfigsmileset arbitrary\r\n; echo local inclusion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo works with registerglobals ...
Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit
No description provided by source. ?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...
Linux Kernel <= 2.4.20 decode_fh Denial of Service Exploit
No description provided by source. / Linux 2.4.20 knfsd kernel signed/unsigned decodefh DoS Author: jared stanbrough jareds pdx edu Vulnerable code: fs/nfsd/nfs3xdr.c line 52-64 static inline u32 decodefhu32 p, struct svcfh fhp int size; fhinitfhp, NFS3FHSIZE; size = ntohlp++; if size NFS3FHSIZE...
X.Org xorg-x11-xfs <= 1.0.2-3.1 - Local Race Condition Exploit
No description provided by source. !/bin/sh Xorg-x11-xfs Race Condition Vuln local root exploit CVE-2007-3103 Another lame xploit by vl4dZ : works on redhat el5 and before $ id uid=1001kecos gid=1001user groups=1001user $ sh xfs-RaceCondition-root-exploit.sh Generate large data file in...
Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit
No description provided by source. !/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the ...
WordPress Easy Banners 1.4 Cross Site Scripting
Exploit Title : Wordpress easy-banners.1.4 Cross Site Scripting Exploit Author : Ashiyane Digital Security Team Vendor Homepage : http://wordpress.org/plugins/easy-banners/ Software Link : http://downloads.wordpress.org/plugin/easy-banners.1.4.zip Date : 2014-06-28 Tested on : Windows 7 / Mozilla...