| Email address | private |
|---|---|
| Website | twitter.com/itablackhawk |
| First Active | 2007-04-08 |
| Last Active | 2014-07-25 |
Pligg versions 2.0.1 and below suffer from remote SQL injection, path disclosure, and remote command execution vulnerabilities.
c2c28c873ee47063568571f00db6636cThis Metasploit module exploits a vulnerability found in Project Pier. The application's uploading tool does not require any authentication, which allows a malicious user to upload an arbitrary file onto the web server, and then cause remote code execution by simply requesting it. This Metasploit module is known to work against Apache servers due to the way it handles an extension name, but the vulnerability may not be exploitable on others.
01e3503737951dd2701001ba7f862b15ProjectPier versions 0.8.8 and below suffers from a remote shell upload vulnerability.
90ac84892750f2b07c4583fc5e2d90eePligg CMS versions 0.9 BETA and 1.1.1 suffer from a remote command execution vulnerability.
5d97795a0f15d0f985e6dc5877fb9520CMSQLite versions 1.2 and below and CMySQLite versions 1.3.1 and below remote code execution exploit.
c99b4e6c3d37ed8f68477c2a848b09e5Podcast Generator versions 1.1 and below remote code execution exploit.
f61bc7bf4349ce0f0ba5deddffb0ac9fEvilsentinel versions 1.0.9 and below disable exploit.
a7e0df95a9f30c66b0581822cc939307LightBlog version 8.4.1.1 remote code execution exploit.
4d677127bedc9bcaef784a49e2f18ae3MyCMS version 0.9.8 and below remote command execution exploit (another version).
063976eb1404efc25d53ebe652537368MyCMS version 0.9.8 and below remote command execution exploit.
4aa6d7435363db0ee5170c3bc69e3b39Solar Empire versions 2.9.1.1 and below blind SQL injection and hash retrieval exploit.
0bca19f9ca878b5d38907407dcfc8712RevokeBB versions 1.0 RC4 and below blind SQL injection and hash retrieval exploit.
7e9094307a42228b1ab05f6827edea16Inout Search Engine remote code execution exploit that affects all versions.
1d149695148bdf19c2c3dbab3428d9a1AlstraSoft Template Seller Pro versions 3.25 and below remote code execution exploit.
011b92e77529011193e5a2d895caaa9cAlstraSoft Live Support version 1.21 admin credential retrieve exploit.
c43ed62711012c9c0380afa921bb9922AlstraSoft Template Seller Pro versions 3.25 and below admin password change exploit.
4e901010cd19940604daf9396a7e0181AlstraSoft E-Friends versions 4.21 and below Admin Session retrieve exploit.
a92f70b591ee1237dcc6440d0fddfc1bMyBlog versions 0.9.8 and below remote command execution exploit.
d430553f8df212421565fc4248e432e9InoutMailingListManager versions 3.1 and below remote command execution exploit.
6206b61f109bb47fa36a74ea5bd437bephpMyNewsletter version 0.8 beta 5 and below multiple vulnerability exploit.
387efcf804d5b95f56fdf356a544afa6
© 2016 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed