what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 7 of 7

Files from aCiDBiTS

turboTraffic.txt

Posted Oct 13, 2004

Authored by aCiDBiTS

Turbo Traffic Trader Nitro version 1.0 is susceptible to multiple cross site scripting and SQL injection attacks. Full exploitation for the SQL injection attack provided.

tags | exploit, xss, sql injection

SHA-256 | f97ca616c43e652dfe2c9583e834a64932f03512bef096f4d9c26c7aa3a171ad

Download | Favorite | View

cjoverkill403.txt

Posted Oct 13, 2004

Authored by aCiDBiTS

There is no user input sanitation for some parameters in trade.php in CJOverkill version 4.0.3, allowing for cross site scripting attacks to take place.

tags | advisory, php, xss

SHA-256 | fb8ec6223316254b7134b54190da91977cf5dee5771fab54f779e3ca86aae2bc

Download | Favorite | View

serendipityPoC.txt

Posted Oct 1, 2004

Authored by aCiDBiTS

Serendipity 0.7-beta1 and below proof of concept SQL injection exploit that dumps the administrator's username and md5 password hash.

tags | exploit, sql injection, proof of concept

SHA-256 | 0921a8c65327c27213316b4ea2d5b801a1e0596f4384dfe6d3868e19d39cc355

Download | Favorite | View

torrent_exp.php.txt

Posted Sep 9, 2004

Authored by aCiDBiTS

Proof of concept PHP exploit that makes use of a SQL injection vulnerability in TorrentTrader version 1.0 RC2.

tags | exploit, php, sql injection, proof of concept

SHA-256 | 9dce80108f836bd4eddb0de491a4df30d5452b7e1a68e5c6138b0452f93c7280

Download | Favorite | View

gallery-php.txt

Posted Aug 26, 2004

Authored by aCiDBiTS

PHP based exploit for Gallery versions 1.4.4 and below that makes use of an arbitrary file upload flaw.

tags | exploit, arbitrary, php, file upload

SHA-256 | b806e5a726748ac3e812380c5c54072f07a8feb8a713637a035694778211fc2d

Download | Favorite | View

yapig-php.txt

Posted Aug 19, 2004

Authored by aCiDBiTS

PHP based exploit for YaPiG 0.x that allows for an attacker to create arbitrary files on a vulnerable server.

tags | exploit, arbitrary, php

SHA-256 | d84ef4efc63ad0141d177a09b8ac9eb78fe82f50b463c66537c20e53232f892a

Download | Favorite | View

nucleusCMSSQL.txt

Posted Jul 27, 2004

Authored by aCiDBiTS

Nucleus CMS version 3.01 addcoment/itemid SQL Injection Proof of Concept PHP exploit that dumps the username and md5 hash of the password for the administrator user.

tags | exploit, php, sql injection, proof of concept

SHA-256 | f381b9e4184efeb21af8394ab8bfa4585b0b12a1ecc75b4d37d1c396de95e22d

Download | Favorite | View