monalbum-exec.txt

"; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase = $POST'gcfgBase'; $gcfgUser = $POST'gcfgUser'; $gcfgPass = $POST'gcfgPass'; $gcfgHote = $POST'gcfgHote'; $gpage = $POST'gpage'; $grepertoire = $POST'grepertoire'; $gfond = $POST'gfond'; $gtitre =...

Unfixed XSS vulnerability at y-click.com

Security researcher kusomiso, has submitted on 05/09/2007 a cross-site-scripting XSS vulnerability affecting y-click.com, which at the time of submission ranked 1053645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is currently...

1024CMS-disclose.txt

'/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor : http://www.treble.lfhost.com ! Author : Dj7xpl ! Type : Remote File...

pnv4b-sql.txt

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

PostNuke Module v4bJournal - SQL Injection

PostNuke Module v4bJournal - SQL Injection ---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir...

PostNuke Module v4bJournal - SQL Injection

---------------------------------------- PostNuke Journal ---------------------------------------- DISCOVERED BY :Ali Abbasi Olom Fonon Mazandaran University - Security Research Center, Babol, Iran Greetz For All Y! UnderGround Group Members www.2600.ir Greetz For All Persian Bugtraq Members...

1024 CMS 0.7 (download.php item) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== 1024 CMS 0.7 download.php item Remote File Disclosure Vulnerability ===================================================================== '/ -.-...

1024 CMS 0.7 - download.php Remote File Disclosure

1024 CMS 0.7 - download.php Remote File Disclosure '/ -.- --------------------oOO------OOo------------------- | Y! Underground Group | | www.dj7xpl.2600.ir | | Dj7xpl @ 2600.ir | ------------------------------------------------------ ! Portal : 1024 CMS Version 0.7 ! Vendor :...

psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit

Exploit for unknown platform in category web applications ================================================================ psipuss 1.0 editusers.php Remote Change Admin Password Exploit ================================================================ ?php / '/ -.-...

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure

JChit counter 1.0.0 - imgsrv.php?ac Remote File Disclosure Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: jchit counter v1.0.0 Download.....:...

PHP-Ring Webring System 0.9 - SQL Injection

PHP-Ring Webring System 0.9 - SQL Injection Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: uPHPringwebsite Download.....: http://www.undoweb.frih.net ,...

PHP-Ring Webring System 0.9 - SQL Injection

Y! Underground Group http://2600.ir -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=- Portal.......: uPHPringwebsite Download.....: http://www.undoweb.frih.net , http://undoweb.frih.net/downloads/uPHPringwebsite.zip...

jGallery 1.3 (index.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ jGallery 1.3 index.php Remote File Inclusion Vulnerability ============================================================...

Battle.net Clan Script for PHP 1.5.1 - SQL Injection

Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...

CVE-2006-5977: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the 1 M or 2 Y parameter to rssout.asp, or the 3 cate parameter to allcalendars.asp. NOTE: the allcalendars.asp/calsids vector is already covered by CVE-2006-2293...

CVE-2005-4008: Undefined Security Weakness

SQL injection vulnerability in jaxcalendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter, and possibly the 2 Y and 3 m parameters...

CVE-2005-2673: Undefined Security Weakness

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...

security flaw

Multiple buffer overflows in gram.y for PostgreSQL 8.0.1 and earlier may allow attackers to execute arbitrary code via 1 a large number of variables in a SQL statement being handled by the readsqlconstruct function, 2 a large number of INTO variables in a SELECT statement being handled by the...