what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 28

Files from Liz0ziM

fastfree-rfi.txt

Posted Jun 9, 2008

Authored by Liz0ziM | Site biyosecurity.com

Fast Free Media Script remote code execution exploit that makes use of a remote file inclusion vulnerability.

tags | exploit, remote, code execution, file inclusion

SHA-256 | 83ce7f663515b7470760d415bbbc5dfc6f91a16f512d2cc981aea76f73868abc

Download | Favorite | View

vbseo-xss.txt

Posted Apr 1, 2008

Authored by Liz0ziM, ErNe, KraL, Ekin0x

VbSeo suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 6b6f21c6f611e76839a26986641ae360ca4bb37a26527b04d985626991e61e5c

Download | Favorite | View

adult-access.txt

Posted Dec 13, 2007

Authored by Liz0ziM | Site biyo.tk

Adult Script unauthorized administrative access exploit.

tags | exploit

SHA-256 | 40ee0f22dece88845192adbb71ceb8e17056522e2ce13f53fabe330bdc7b64be

Download | Favorite | View

sciuris-inject.txt

Posted Nov 26, 2007

Authored by Liz0ziM | Site expw0rm.com

Sciurus Hosting Panel remote code injection exploit.

tags | exploit, remote

SHA-256 | 970c84d08146a628ed14566ad0049f63e193da51f4d9ca6972676548a3f8b934

Download | Favorite | View

ifdate-bypass.txt

Posted May 15, 2007

Authored by Liz0ziM | Site expw0rm.com

iFdate 2.x suffers from an unauthorized administrative access vulnerability.

tags | exploit, bypass

SHA-256 | 219d01bcd37375c560406ea7ef180f6f8f821031304c136521ef59feeac8e9b0

Download | Favorite | View

hot-lfi.txt

Posted Apr 10, 2007

Authored by Liz0ziM | Site expw0rm.com

The MyBB Hot Editor plugin version 4.0 suffers from a local file inclusion vulnerability in the "sec" variable in keyboard.php.

tags | exploit, local, php, file inclusion

SHA-256 | e14c76898d21a2bb7836c82a1533fd84e33cbe089dfd3e60c8d2c67e653360c8

Download | Favorite | View

mybb-traverse.html

Posted Apr 10, 2007

Authored by Liz0ziM | Site expw0rm.com

The MyBB Hot Editor plugin version 4.0 suffers from a local file inclusion vulnerability in the "first" variable in keyboard.php.

tags | exploit, local, php, file inclusion

SHA-256 | 4acfe1429e3c6665582ad8a653da47543cf23e72c2de86b14572ade8f99554bd

Download | Favorite | View

articleSQL.txt

Posted Nov 7, 2006

Authored by Liz0ziM

Article Script versions 1.6.3 and below remote SQL injection exploit that makes use of rss.php.

tags | exploit, remote, php, sql injection

SHA-256 | 26e847be2fef5a404040ee16fee0d846e433440f7c56fb6d29bf195eac223b47

Download | Favorite | View

easycms.txt

Posted Jun 26, 2006

Authored by Liz0ziM | Site biyo.tk

Easy CMS version 0.1.2 suffers from a PHP shell upload vulnerability.

tags | exploit, shell, php

SHA-256 | a407d6254224e76c259133b42526b4b0cfb5368ce0faf18d51fb95e72a45bbc0

Download | Favorite | View

Eduha.txt

Posted Jun 26, 2006

Authored by Liz0ziM | Site biyo.tk

Eduha Meeting suffers from a PHP shell upload vulnerability.

tags | advisory, shell, php

SHA-256 | e13c02e3000952d145836383935795a5493cc2b5214872328d0d4bcb6ce56882

Download | Favorite | View

clineSQL.txt

Posted Jun 26, 2006

Authored by Liz0ziM | Site biyo.tk

Cline Communications software is susceptible to multiple SQL injection vulnerabilities.

tags | exploit, vulnerability, sql injection

SHA-256 | 518370dfc29d153ca65c6840ac1d5d6351dd684caaeeeed4ddceb4a2b12b159e

Download | Favorite | View

shad0w.txt

Posted Apr 11, 2006

Authored by Liz0ziM | Site liz0zim.no-ip.org

Shadowed Portal suffers from XSS.

tags | advisory

SHA-256 | 23d24a5c2f2d5fba7f51da46c97aa518bdc53ce2336966b2b071aef6602a9139

Download | Favorite | View

mattguestbook.txt

Posted Apr 11, 2006

Authored by Liz0ziM | Site liz0zim.no-ip.org

The Matt Wright Guestbook suffers from XSS

tags | advisory

SHA-256 | cdd799093cb6bb94253c508727d162b759e98859c70573f78c334f32f281c7fd

Download | Favorite | View

alp.txt

Posted Apr 11, 2006

Authored by Liz0ziM | Site liz0zim.no-ip.org

Autonomous LAN party suffers from a remote file inclusion vulnerability in gameSpy2.php.

tags | advisory, remote, php, file inclusion

SHA-256 | 865e838a30fbbb0474dafe38006426daec23b30b2d4e6aa68b50ac39c661131e

Download | Favorite | View

vwar.txt

Posted Apr 11, 2006

Authored by Liz0ziM | Site biyosecurity.be

Virtual War suffers from a remote file inclusion vulnerability in the vwar_root variable.

tags | advisory, remote, file inclusion

SHA-256 | f670bd6b8b53d9fcd8a96cf245a18cc3b8dfb00c60d95bbdfaef7a980b7169ec

Download | Favorite | View

UploadCenter.txt

Posted Mar 10, 2006

Authored by Liz0ziM | Site biyosecurity.com

PHP Upload Center allows anyone to download users password hashes and upload malicious php scripts.

tags | exploit, php

SHA-256 | c9121b0e7c141f324a8113f226faa8d61c1346fe0babb7462765aa95ebe4f7a3

Download | Favorite | View

n8cms.txt

Posted Mar 10, 2006

Authored by Liz0ziM | Site biyosecurity.com

n8cms versions 1.1 and 1.2 suffer from XSS and SQL injection.

tags | exploit, sql injection

SHA-256 | cbeb9a84efe8ff88818b084a4abdeb582aa02dddaa34adca0fd3a9fd8e4b75f6

Download | Favorite | View

php-atm.txt

Posted Mar 10, 2006

Authored by Liz0ziM | Site biyosecurity.com

It is possible to download the users password hashed in PHP Advanced Transfer Manager 1.x via a special URL.

tags | exploit, php

SHA-256 | 94dd1adf4a7926508e3f52f536f7a190f575b355f715a85e793baf17aa2aa609

Download | Favorite | View

adpforum2.txt

Posted Mar 10, 2006

Authored by Liz0ziM | Site biyosecurity.com

ADP Forum 2.0.x is vulnerable to script injection while posting messages.

tags | advisory

SHA-256 | 2ed2a823d9229a7713b6bb331294325d16d362411301591c45b30cd9ecb08eed

Download | Favorite | View

dvguestbook.txt

Posted Mar 8, 2006

Authored by Liz0ziM | Site biyosecurity.com

DVguestbook versions 1.0 and 1.2.2 suffer from multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | 77e527786650af069b7dcca5fae0b701e0cc533c741277b09b04e4c6af83f69b

Download | Favorite | View

patm.txt

Posted Mar 3, 2006

Authored by Liz0ziM | Site biyosecurity.com

Direct download access of user password hashes in PHP Advanced Manager version 1.00 through 1.20 exists.

tags | exploit, php

SHA-256 | a67feb6dd1846b727f392b5ad41036cdb3fa20a1cde38238cf6dd80efae9093a

Download | Favorite | View

n8cmsFlaws.txt

Posted Mar 2, 2006

Authored by Liz0ziM | Site biyosecurity.be

n8cms versions 1.1 and 1.2 are susceptible to SQL injection and cross site scripting attacks.

tags | exploit, xss, sql injection

SHA-256 | fe471b60db375a64d5b19a4b42c60dabfa75f6dd88154be9fd9797ae544316d4

Download | Favorite | View

whitealbum.txt

Posted Jan 21, 2006

Authored by Liz0ziM | Site biyosecurity.be

WHITEAlbum is susceptible to SQL injection attacks via pictures.php.

tags | exploit, php, sql injection

SHA-256 | ae1fcebac9700b83ec80ba4aa8ce091854b6d6537de98123711e7ec7fa906238

Download | Favorite | View

vbulletin352.txt

Posted Jan 10, 2006

Authored by Liz0ziM, Ejder, The_BeKiR, CyberLord | Site Savsak.com

vBulletin version 3.5.2 is susceptible to cross site scripting attacks.

tags | exploit, xss

SHA-256 | a64a9933a806b595011660fd9c1b7bd3ab7a1df6ed2a9533de689cc75d49cf2a

Download | Favorite | View

drupal.txt

Posted Jan 3, 2006

Authored by Liz0ziM | Site biyo.tk

Drupal is susceptible to cross site scripting attacks via IMG tags.

tags | exploit, xss

SHA-256 | 6558fb5680f1880fb2833560832fbb21fbc4681cd2f2832090705665684184dd

Download | Favorite | View