what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 51 - 75 of 331

Files

e107fmpro-upload.txt

Posted Oct 29, 2008

Authored by GolD_M | Site tryag.cc

Version 1 of the fm pro plugin for e107 suffers from file disclosure, php shell upload, and directory traversal vulnerabilities.

tags | exploit, shell, php, vulnerability, file upload

SHA-256 | 8021283fb655ef96457728660478f4c2f9577a967ec4017d88c8137f45ea8253

Download | Favorite | View

sepalspboard-exec.txt

Posted Oct 29, 2008

Authored by GolD_M | Site tryag.cc

Sepal SPBOARD 4.5 suffers from a remote command execution vulnerability in board.cgi.

tags | exploit, remote, cgi

SHA-256 | 1bbf194c799baa57511681fe153672a8d9224f35189d05aa408ffe6e52e80f51

Download | Favorite | View

pktrp-dos.txt

Posted Oct 29, 2008

Authored by Jeremy Brown | Site jbrownsec.blogspot.com

PacketTrap TFTPD version 2.2.5459.0 denial of service exploit.

tags | exploit, denial of service

SHA-256 | 46c0b98b1bd588d14a01fe656ccb82c772f810669a3f0f52f4a21ab03e1f2e67

Download | Favorite | View

hhwebsoccer-sql.txt

Posted Oct 28, 2008

Authored by d3v1l

H&H WebSoccer version 2.80 suffers from a remote SQL injection vulnerability in liga.php.

tags | exploit, remote, php, sql injection

SHA-256 | d9c28b6ff6cf7cc6a611c0b3b5b6d3f9c4379cb7d8e9ce30c6219507c6c86b6c

Download | Favorite | View

elkagroup-sql.txt

Posted Oct 28, 2008

Authored by G4N0K

Elkagroup Image Gallery version 1.0 suffers from a remote SQL injection vulnerability in view.php.

tags | exploit, remote, php, sql injection

SHA-256 | 5abc14f591b88d75236d35fd942c8c23ec43be387e8e9d754cbb41f562ae00e6

Download | Favorite | View

h2ocms-exec.txt

Posted Oct 28, 2008

Authored by StAkeR

H2O-CMS versions 3.4 and below remote command execution exploit that uses config.php.

tags | exploit, remote, php

SHA-256 | 476f162a875f46a265df73afb9f9ad40f4d636430039866c4a52d5c2d0e750d2

Download | Favorite | View

tlguestbook-insecure.txt

Posted Oct 28, 2008

Authored by X0r

TlGuestBook version 1.2 suffers from an insecure cookie handling vulnerability.

tags | exploit, insecure cookie handling

SHA-256 | ddd80cecff56ed51a164f1d77b0921baf28ba52ef9ca38978c4aa6c190eeed41

Download | Favorite | View

persianbb-sql.txt

Posted Oct 28, 2008

Authored by Hussin X | Site tryag.cc

PersianBB suffers from a remote SQL injection vulnerability in iranian_music.php.

tags | exploit, remote, php, sql injection

SHA-256 | dfcad956c33a178eed608bd579f3635aef32c3acc0e40057d132548577f52362

Download | Favorite | View

agares-rfi.txt

Posted Oct 28, 2008

Authored by DaRkLiFe

Agares ThemeSiteScript version 1.0 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | 7d0ac2889360980373d3044b0655740be0ed4fe5f8005dfae33bdbc24e2209bd

Download | Favorite | View

myforum-insecure.txt

Posted Oct 28, 2008

Authored by Stack | Site v4-team.com

MyForum version 1.3 suffers from an insecure cookie handling vulnerability.

tags | exploit, insecure cookie handling

SHA-256 | 2894d3eae54e509a1025d1c3d60c5cd35fdfc46afeeb952080c809a32986c40d

Download | Favorite | View

phpnukeleague-xss.txt

Posted Oct 28, 2008

Authored by Ehsan_Hp200

The League module in PHP-Nuke suffers from a cross site scripting vulnerability.

tags | exploit, php, xss

SHA-256 | 9112c745dcf3bd81d5ba1b9a8beeae17f916f2d08f191e5ebcf2dc8b301f17e6

Download | Favorite | View

aiocp14-sql.txt

Posted Oct 28, 2008

Authored by ExSploiters

Aiocp version 1.4 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | aa4fd68ea1a062759aadcc7e70057f268035c17095df921dc2081da56b9eaf1b

Download | Favorite | View

e107easyshop-sql.txt

Posted Oct 28, 2008

Authored by StAkeR

Remote blind SQL injection exploit for the EasyShop plugin used in e107.

tags | exploit, remote, sql injection

SHA-256 | 91d2cd34cdad21066924a22edc3ef89c156a1e4d3a58aa1cac53270a19e2b7e6

Download | Favorite | View

gw-ftrex.c

Posted Oct 28, 2008

Authored by gat3way

Linux kernel versions below 2.6.22 open/ftruncate local exploit.

tags | exploit, kernel, local

systems | linux

advisories | CVE-2008-4210

SHA-256 | fc882d020ccf02b6734ddc1e797b96bc006a5dff5b42e1b57bbbb94bebea2bf1

Download | Favorite | View

tandiscms-sql.txt

Posted Oct 28, 2008

Authored by G4N0K

Tandis CMS versions 2.5.0 and below suffer from multiple SQL injection vulnerabilities.

tags | exploit, vulnerability, sql injection

SHA-256 | 455d2f4c61fd4fa9543f6079f5285f7cc615899a2b30b771b935afab9a406e33

Download | Favorite | View

azadi-sql.txt

Posted Oct 28, 2008

Authored by Hussin X | Site tryag.cc

Azadi Network suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | f684a77bc4afa2ee0fad643c275f8b2e16dac3687d3e86b04447a931dba47b5e

Download | Favorite | View

phpmyadminall-xss.txt

Posted Oct 27, 2008

Authored by Hadi Kiamarsi

All versions of phpMyAdmin as of 10/2008 suffer from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 7199936079984d82abcdee59bf6addda64492b9f7cb4bdf9795b9dcaf87ee55a

Download | Favorite | View

questcms-sqlxsstraverse.txt

Posted Oct 27, 2008

Authored by d3b4g

Quest CMS suffers from cross site scripting, directory traversal, and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection, file inclusion

SHA-256 | e86739be1e8bb64544f30c24c91beb98e2e77a79bbccf1adfde0b2c321a9faee

Download | Favorite | View

zubrag-upload.txt

Posted Oct 27, 2008

Authored by Dentrasi

Zubrag Uploader version 1.0 suffers from a shell upload vulnerability due to a failed random file rename.

tags | exploit, shell, file upload

SHA-256 | c93b50c10f3ae690a5de33e25db1895cc24b5ff9b0f265ba00d333a3b6b6bcf1

Download | Favorite | View

mybbs142-multi.txt

Posted Oct 27, 2008

Authored by Micheal Cottingham

MyBB version 1.4.2 suffers from cross site scripting and remote code execution vulnerabilities.

tags | exploit, remote, vulnerability, code execution, xss

SHA-256 | 7cd7c424c1fe432f5291c6c5a945c4b21961ebd7c63f0678a83419ea7b5c08fc

Download | Favorite | View

myktools-lfi.txt

Posted Oct 27, 2008

Authored by X0r

MyKtools version 2.4 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | bce61fb6911b802f6c41f9c6e46404303083734196b70af885a7bae403c7c022

Download | Favorite | View

e107-sql.txt

Posted Oct 27, 2008

Authored by boom3rang | Site khq-crew.ws

The alternate_profiles plugin in e107 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | feaf84cb2e0b70152c2fefac784a64a301b2950f99fdfc0a70e5c55809487392

Download | Favorite | View

wpmediaholder-sql.txt

Posted Oct 27, 2008

Authored by boom3rang | Site khq-crew.ws

WordPress Media Holder suffers from a remote SQL injection vulnerability in mediaHolder.php.

tags | exploit, remote, php, sql injection

SHA-256 | ee2f48fc89c5f7d7d48c639dbc8c66360cca8090966edc1d833f49b59ed1ff24

Download | Favorite | View

persiabme-sql.txt

Posted Oct 27, 2008

Authored by AmnPardaz Security Research Team | Site bugreport.ir

Persia BME E-Catalogue suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | c019abec357a7ce5be9fdd0ccb4347531afec13f1c3d559afc9f018329196f8a

Download | Favorite | View

bcoos-rfi.txt

Posted Oct 27, 2008

Authored by Cru3l.b0y | Site deltahacking.ir

bcoos version 1.0.13 suffers from a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | d6e97b462d4b4abdb955520b718befe21805d9456eeddd7ace90a29b73c6476f

Download | Favorite | View