what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files Date: 2013-11-28

Pastebin CAPTCHA Bypass

Posted Nov 28, 2013

Authored by Scott Arciszewski

Pastebin suffers from a CAPTCHA bypass vulnerability.

tags | exploit, bypass

SHA-256 | 56392168410383eae1397d73dcb93faad1595c25e457f29f5a49e99776da26ab

Download | Favorite | View

Kimai 0.9.2 db_restore.php SQL Injection

Posted Nov 28, 2013

Authored by Brendan Coles, drone | Site metasploit.com

This Metasploit module exploits a SQL injection vulnerability in Kimai version 0.9.2.x. The 'db_restore.php' file allows unauthenticated users to execute arbitrary SQL queries. This Metasploit module writes a PHP payload to disk if the following conditions are met: The PHP configuration must have 'display_errors' enabled, Kimai must be configured to use a MySQL database running on localhost; and the MySQL user must have write permission to the Kimai 'temporary' directory.

tags | exploit, arbitrary, php, sql injection

SHA-256 | 853a61dfd6df69f1dd037fceb6af76d6aa56c0b508cd161484f30988de0f9da7

Download | Favorite | View