Section: .. / 0906-exploits /
| /// File Name: |
onlinega326-lfi.txt |
Description:
|
Online Grades and Attendance version 3.2.6 suffers from multiple local file inclusion vulnerabilities.
| | Author: | YEnH4ckEr | | File Size: | 5015 | | Last Modified: | Jun 2 23:32:26 2009 |
| MD5 Checksum: | b663c3470169d633548ed0e1d94786f9 |
|
| /// File Name: |
onlinega326-sql.txt |
Description:
|
Online Grades and Attendance version 3.2.6 suffers from multiple remote SQL injection vulnerabilities.
| | Author: | YEnH4ckEr | | File Size: | 5304 | | Last Modified: | Jun 2 23:30:04 2009 |
| MD5 Checksum: | 81de385b1792395583291601d50eabb8 |
|
| /// File Name: |
openbiller-sql.txt |
Description:
|
Open Biller version 0.1 remote blind SQL injection exploit.
| | Author: | YEnH4ckEr | | File Size: | 9613 | | Last Modified: | Jun 10 20:10:11 2009 |
| MD5 Checksum: | d5fa2b14263dd06b9bb8831251d7bc3c |
|
| /// File Name: |
openschool-sql.txt |
Description:
|
Open-School version 1.0 suffers from a remote SQL injection vulnerability.
| | Author: | C1c4Tr1Z | | File Size: | 872 | | Last Modified: | Jun 2 23:17:11 2009 |
| MD5 Checksum: | 1e15d88fc0711b17c11e4a3330e7030a |
|
| /// File Name: |
oxygen2php113-blindsql.txt |
Description:
|
Oxygen2PHP versions 1.1.3 and below remote blind SQL injection exploit that leverages forumdisplay.php.
| | Author: | Dante90 | | Homepage: | http://www.warwolfz.org/ | | File Size: | 4222 | | Last Modified: | Jun 29 17:38:32 2009 |
| MD5 Checksum: | 5d40aaf3e05cad04abf109ed9318dc57 |
|
| /// File Name: |
padsitescripts-backup.txt |
Description:
|
PAD Site Scripts version 3.6 suffers from an arbitrary database backup vulnerability.
| | Author: | TiGeR-Dz | | Homepage: | http://www.h4ckf0u.com/ | | File Size: | 1127 | | Last Modified: | Jun 2 23:31:01 2009 |
| MD5 Checksum: | 97fac7ba2f32bd2fb1a2eaae66b58adc |
|
| /// File Name: |
pc4uploader-disclose.txt |
Description:
|
pc4 Uploader versions 10.0 and below suffer from a remote file disclosure vulnerability.
| | Author: | Qabandi | | File Size: | 5493 | | Last Modified: | Jun 22 22:05:43 2009 |
| MD5 Checksum: | ba1877fd76d0acb5f28a0f882d677a67 |
|
| /// File Name: |
pdshoppro-xss.txt |
Description:
|
PDshopPro suffers from a cross site scripting vulnerability.
| | Author: | Vrs-hCk | | File Size: | 1032 | | Last Modified: | Jun 10 18:28:27 2009 |
| MD5 Checksum: | cfb5010b1d935d90806929c27d5faa1b |
|
| /// File Name: |
peazip-inject.txt |
Description:
|
PeaZIP versions 2.6.1 and below compressed filename command injection proof of concept exploit.
| | Author: | Nine:Situations:Group | | Homepage: | http://retrogod.altervista.org/ | | File Size: | 4885 | | Last Modified: | Jun 5 16:23:07 2009 |
| MD5 Checksum: | 9b3bd1150de7e9d2a2d691ebb831fabe |
|
| /// File Name: |
peel-sql.txt |
Description:
|
PEEL E-Commerce suffers from a remote SQL injection vulnerability.
| | Author: | baltazar | | Homepage: | http://www.darkc0de.com/ | | File Size: | 5448 | | Last Modified: | Jun 19 19:20:45 2009 |
| MD5 Checksum: | 542325923a6d01427f1ad9ccd83e2a01 |
|
| /// File Name: |
php5210-bypass.txt |
Description:
|
PHP version 5.2.10 has an invalid fix for the safe_mode bypass with exec/system/passthru. Proof of concept included.
| | Author: | hitest | | File Size: | 1107 | | Last Modified: | Jun 19 19:18:28 2009 |
| MD5 Checksum: | d908b0e20e9e8279d0545a3925a4b7c5 |
|
| /// File Name: |
phpaddressbook4-sql.txt |
Description:
|
PHP Address Book version 4.0.x suffers from multiple remote SQL injection vulnerabilities.
| | Author: | YEnH4ckEr | | File Size: | 2950 | | Last Modified: | Jun 26 18:48:37 2009 |
| MD5 Checksum: | 774988fd01b1365d3495fb5a1c79e0e1 |
|
| /// File Name: |
phpcollegeexchange-rfilfixss.txt |
Description:
|
phpCollegeExchange version 0.1.5c suffer from remote file inclusion, local file inclusion, and cross site scripting vulnerabilities.
| | Author: | CraCkEr | | File Size: | 5448 | | Last Modified: | Jun 23 20:06:41 2009 |
| MD5 Checksum: | 77ffbf8258261c6f5f5e89fc4843aa00 |
|
| /// File Name: |
phpcollegeexchange-sql.txt |
Description:
|
phpCollegeExchange version 0.1.5c suffers from a remote SQL injection vulnerability in listing_view.php.
| | Author: | SirGod | | Homepage: | http://www.insecurity.ro/ | | File Size: | 709 | | Last Modified: | Jun 15 16:55:30 2009 |
| MD5 Checksum: | 1435b5e0946bec97b48d7ceefb95d72b |
|
| /// File Name: |
phpdatingclub-sqlxss.txt |
Description:
|
phpDatingClub version 3.7 suffers from remote SQL injection and cross site scripting vulnerabilities.
| | Author: | ThE g0bL!N | | Homepage: | http://h4ckf0ru.com/ | | File Size: | 1181 | | Last Modified: | Jun 22 22:15:29 2009 |
| MD5 Checksum: | 217caa645303cafc65c50775cde75b31 |
|
| /// File Name: |
phpechocms-xss.txt |
Description:
|
PHPEcho CMS version 2.0-rc3 suffers from cross site scripting and blind SQL injection vulnerabilities.
| | Author: | JosS | | Homepage: | http://www.spanish-hackers.com/ | | File Size: | 1230 | | Last Modified: | Jun 24 20:15:30 2009 |
| MD5 Checksum: | 9e5962dd05566951b54319e583874ebd |
|
| /// File Name: |
phpfk-lfi.txt |
Description:
|
phpFK version 7.03 suffers from a local file inclusion vulnerability in page_bottom.php.
| | Author: | ahmadbady | | File Size: | 612 | | Last Modified: | Jun 17 18:46:00 2009 |
| MD5 Checksum: | a82759bd3e1374033cae98262bd97190 |
|
| /// File Name: |
phpmyadminrcesh.txt |
Description:
|
phpMyAdmin /scripts/setup.php PHP code injection remote command execution proof of concept exploit. Versions 3.0.1.1 and below are affected.
| | Author: | pagvac | | File Size: | 4197 | | Related CVE(s): | CVE-2009-1151 | | Last Modified: | Jun 10 18:24:10 2009 |
| MD5 Checksum: | 59f3c5673bb3b69956d8432c0e7b8a9a |
|
| /// File Name: |
phpmytourneyadmin-rfi.txt |
Description:
|
phpMyTourney suffers from a remote file inclusion vulnerability in adminfunctions.php. This is using the same variable as was discovered in September of 2007.
| | Author: | Am!r | | Homepage: | http://www.irist.ir/ | | Related Exploit: | phpmytourney-rfi.txt | | File Size: | 2769 | | Last Modified: | Jun 16 12:55:03 2009 |
| MD5 Checksum: | c9f20b1023cdbda2c0b35fff5f1faac0 |
|
| /// File Name: |
phportal-sql.txt |
Description:
|
Phportal version 1 suffers from a remote SQL injection vulnerability.
| | Author: | XORON | | File Size: | 788 | | Last Modified: | Jun 15 20:07:12 2009 |
| MD5 Checksum: | 1fd55c6c3823142e8f98dbcad92fc29b |
|
|
|
|
|