exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 26 - 46 of 46

Files from Diabolic Crab

postnukeSQL.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

PostNuke 0.760-RC3 is susceptible to SQL injection and cross site scripting attacks.

tags | exploit, xss, sql injection

SHA-256 | 1980dd4e2e92bf4117657e6d579f8f7c916706f0ee78009ae756ab764277c296

Download | Favorite | View

litecommerceSQL.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

LiteCommerce is susceptible to SQL injection attacks.

tags | exploit, sql injection

SHA-256 | 65375726c3dfaa565221f0ca7b30717c880c12c904e10e22a10a1d64cbc263b6

Download | Favorite | View

activeAuction.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Active Auction House suffers from multiple SQL injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 47a1f19b59e6a4e0d72e9c88d695edbf9a8eb08364c9f09e0b9d0a1e2cc57bba

Download | Favorite | View

PayProCart30.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

PayProCart 3.0 is susceptible to directory traversal, authentication bypass, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | 9d8641008ccf131e7ce7e872deae55c88e6b5e8f22e3983e98d1fc947b4179ec

Download | Favorite | View

turnkeyShopping.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

The Turnkey Shopping Cart software is susceptible to multiple SQL injection attacks.

tags | exploit, sql injection

SHA-256 | 0315b95ae054162c8cab75915c4efbbdac50e2bb3d1f1eb8aaf08190aab7827a

Download | Favorite | View

AlstraSoft20.txt

Posted Apr 17, 2005

Authored by Diabolic Crab | Site hackerscenter.com

AlstraSoft EPay Pro version 2.0 has file include and multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | 41a421339fefd9706dbe6b1928fe8c17fa15574d2aad1e7d5d18cba6fb06d018

Download | Favorite | View

mxXSSnSQL.txt

Posted Apr 14, 2005

Authored by Diabolic Crab | Site hackerscenter.com

MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities.

tags | exploit, vulnerability, sql injection

SHA-256 | cda57b70801924f974735dde38c740c6505570a2ab189e83352ad0641f80cd00

Download | Favorite | View

PaFileDB.txt

Posted Apr 14, 2005

Authored by Diabolic Crab | Site hackerscenter.com

PaFileDB versions 3.1 and below are susceptible to cross site scripting and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 0bcc5d0fcb6a3811255815b322bbcb5849b9301dcdefe30ee137fdecbc4519a5

Download | Favorite | View

paypalxssSQL.txt

Posted Apr 14, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Multiple SQL injection and cross site scripting flaws lived in the PayPal storefront.

tags | advisory, xss, sql injection

SHA-256 | 25479aacd4cca29b42cd902d9f545c5e759d7883edd84f2026a44dba60c43066

Download | Favorite | View

squirrelSQL.txt

Posted Mar 30, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Squirrelcast PHP Shopping Cast is susceptible to SQL injection attacks. Sample exploitation details provided.

tags | exploit, php, sql injection

SHA-256 | 9034a1b7791dbb49ea62cba1ba3aa5f0d0c0d09c6551a60c8ca3c2d2764fd09e

Download | Favorite | View

tripodXSS.txt

Posted Mar 30, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Tripod.com suffers from multiple cross site scripting flaws.

tags | exploit, xss

SHA-256 | 5e26ffe5df8029d71eaf9663f809a5b324b485a87e40fab11d05f233ebdef46e

Download | Favorite | View

AspApp.txt

Posted Mar 29, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Multiple SQL injection and cross site scripting vulnerabilities have been discovered in AspApp. Sample exploitation provided.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 03e90c2cb4195bc7bc382495197baedd3e0d909a18bcfb755d1062bb38afca07

Download | Favorite | View

portalApp.txt

Posted Mar 29, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Multiple SQL injection and cross site scripting vulnerabilities have been discovered in PortalApp. Sample exploitation provided.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | ef8774a270f7cf5c3c385dd44115e3f3ab80760745b1a26d5d9c111db428ebee

Download | Favorite | View

photopostSQLXSS.txt

Posted Mar 29, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Photopost PHP Pro Photo Gallery software is susceptible to multiple cross site scripting and SQL injection attacks. Detailed exploitation provided.

tags | exploit, php, xss, sql injection

SHA-256 | 37b9312ab67645bf7aa36fdc72203dd12b60bfbd3bfb1f48fa1936e2f2486c61

Download | Favorite | View

vladersoft30.txt

Posted Mar 29, 2005

Authored by Diabolic Crab | Site hackerscenter.com

Vladersoft Shopping Cart version 3.0 is susceptible to multiple cross site scripting and SQL injection vulnerabilities. Sample exploitation provided.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | ff883a1159901250b604c992c505e6b30d38334d06fe39e24596c33f727d5e37

Download | Favorite | View

dcrab-e-xoops.txt

Posted Mar 28, 2005

Authored by Diabolic Crab | Site icis.digitalparadox.org

Easy Community Management System Forum (E-XOOPS) contains multiple SQL injection and cross-site scripting vulnerabilities. Some of these may not be exploitable depending on how PHP, Apache, and MySQL have been configured. Advisory contains proof-of-concept exploit URLs.

tags | exploit, php, vulnerability, xss, sql injection

SHA-256 | 383b99f55a4400a2bec840c614876918516b6901632de122f0ebc7126617cb4f

Download | Favorite | View

dcrab-estore.txt

Posted Mar 25, 2005

Authored by Diabolic Crab | Site icis.digitalparadox.org

E-Store Kit-2 PayPal Edition is susceptible to file include and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

SHA-256 | ac872074f1d371f1d96de015fc38c149d3b951e1b6eb8d240882fa2604fa3f38

Download | Favorite | View

dcrab-paypal.txt

Posted Mar 25, 2005

Authored by Diabolic Crab | Site icis.digitalparadox.org

Various cross-site scripting and (possible) SQL injection vulnerabilities exist in ESMIstudio's PayPal storefront scripts. It may not always be possible to exploit some of these depending on how PHP, Apache, and MySQL have been configured, however.

tags | exploit, php, vulnerability, xss, sql injection

SHA-256 | d03061ea7d5a7ea3eb1416dbdfa817a53389af20ae542ec03be5886d095afffa

Download | Favorite | View

dc_iwconfig.c

Posted Oct 26, 2004

Authored by Diabolic Crab | Site hackerscenter.com

Local root exploit for /usr/sbin/iwconfig.

tags | exploit, local, root

SHA-256 | 10b71b48cb5e4b165f212352a02ef424f83595d0dcaf1c2619779a0133ef61f9

Download | Favorite | View

dc_ifenslave.c

Posted Oct 26, 2004

Authored by Diabolic Crab | Site hackerscenter.com

Local root exploit for /sbin/ifenslave.

tags | exploit, local, root

SHA-256 | 8fbd7a93da6b7b610698f7b15ec38201522ff308b0dee9883544408815519bfc

Download | Favorite | View

iis.pl.txt

Posted Oct 26, 2004

Authored by Diabolic Crab | Site digitalparadox.org

IIS 5 null pointer proof of concept exploit.

tags | exploit, proof of concept

SHA-256 | 80e021ee49bc8b8c86efd67d2904ce71e04ef0648b422b39cee57bf1dfef4527

Download | Favorite | View