PHP Support Tickets 2.2 - Arbitrary File Upload

remote file upload script: PHPSupportTicketsv2.2 download from:http://www.phpsupporttickets.com/modules/phpsupporttickets.com/dist/free/PHPSupportTicketsv2.2.zip 1:www.site.com/path/index.php?page=register 2:New Ticket 3:upload php file shell www.site.com/path/upload/you...

CMS MAXSITE Component Guestbook Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl ================================================================== CMS MAXSITE Component Guestbook Remote Command Execution Exploit ================================================================== ,--^----------,--------,-----,-------^--, |...

ToursManager - tourview.php Blind SQL Injection

ToursManager - tourview.php Blind SQL Injection Name:-- ToursManager PhP Script Discovered by:-- XaDoS ContacT m&:-- xadosathotmail.it Site:-- http://www.toursmanager.com ■£XpLoIT: |: http://www.demosite.com/tourview.php?tourid=2%20and%201=1-- true |:...

CVE-2008-5169

SQL injection vulnerability in drinks/drink.php in Drinks Complete Website 2.1.0 allows remote attackers to execute arbitrary SQL commands via the drinkid parameter...

ScriptsFeed (SF) Auto Classifieds Software - Arbitrary File Upload

ScriptsFeed SF Auto Classifieds Software Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu Date: 13.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 39 my target...

PHPStore PHP Job Search Script Remote File Upload Vulnerability

No description provided by source. PHPStore Job Search Remote File Upload Author: ZoRLu msn: [email protected] home: www.z0rlu.blogspot.com N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : ----------------------------------------- exploit: you add this code your shell to head GIF89a; example...

dedecms fill out a tasteless vulnerability-vulnerability warning-the black bar safety net

Author: Ice the origin of theL. S. T&0. S. T Just look at the small handsome gay blog found above also describes a About dedecms a 0day（http://www. xssor. cn/sa/? action=show&id=5 A 8, but this bug and a few months ago that write directly to the file in the vulnerability If is not a file, I...

trnews-bypass.txt

?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zip File admin/login.php 1. ? 2...

Mole Group Airline Ticket Script - SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Tours Manager v1 (cityview.php cityid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Tours Manager v1 cityview.php cityid SQL Injection Vulnerability ==================================================================...

accphpemail-insecure.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap :Acc PHP eMail v1.1 Insecure Cookie Handling Script : http://www.accscripts.com/mailinglist/ Greetz :...

Acc Autos 4.0 Insecure Cookie Handling Vulnerability

No description provided by source. -==========================================- Autore: x0r - Road Crew - Evolution Team Cms: Acc Autos v4.0 Bug: Insecure Cookie Handling Site: http://pro7.altervista.org/v2/ -==========================================- Exploit:...

Maran PHP Shop (prodshow.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Maran PHP Shop prodshow.php SQL Injection Vulnerability =========================================================...

YourFreeWorld Classifieds Hosting - SQL Injection

YourFreeWorld Classifieds Hosting - SQL Injection Classifieds Hosting id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/classifiedshosting.php DorK : inurl:tr.php?id= Hosting Exploit :...

YourFreeWorld Autoresponder Hosting (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== YourFreeWorld Autoresponder Hosting id SQL Injection Vulnerability ==================================================================== Autoresponder Hosting id Remote SQ...

articlepublisher-sql.txt

/ / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : Bybass Login Script : Article Publisher Pro : http://www.phparticlescript.com/ Greetz : Allah ,...

Unfixed XSS vulnerability at www.mines.inpl-nancy.fr

Security researcher Stacker, has submitted on 25/10/2008 a cross-site-scripting XSS vulnerability affecting www.mines.inpl-nancy.fr, which at the time of submission ranked 106129 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is...

YDC - 'cat' SQL Injection

|| | | YDC cat Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://www.ydc.ir/ | | DorK : "Powered by YDC" || Exploit:...

Easynet4u Link Host - cat_id SQL Injection

Easynet4u Link Host - catid SQL Injection Author : BeyazKurt Contact : [email protected] Site : www.khg-crew.ws - KOSOVA HACKERS GROUP LAHEY mahkemesini kiniyoruz. FUCK THE JUSTICE! Script : Easynet4u Link Host Script Site: http://www.easynet4u.com/linkdem.php SQL Injection Vuln. : Exploit :...

Unfixed XSS vulnerability at www.circlesquare.co.uk

Security researcher PaPPy, has submitted on 10/05/2008 a cross-site-scripting XSS vulnerability affecting www.circlesquare.co.uk, which at the time of submission ranked 4760993 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is...