pokleyzz

CVE-2003-0762 EXPLOITDB perl WORKING POC

Foxweb <2.5 - RCE

Buffer overflow in (1) foxweb.dll and (2) foxweb.exe of Foxweb 2.5 allows remote attackers to execute arbitrary code via a long URL (PATH_INFO value).

View Code

EIP-2026-113286 EXPLOITDB perl WORKING POC

Webfroot Shoutbox 2.32 - Remote Command Execution

View Code

EIP-2026-113284 EXPLOITDB text WORKING POC

Webfroot Shoutbox 2.32 - 'URI' File Disclosure

View Code

CVE-2002-0516 EXPLOITDB bash WORKING POC

SquirrelMail <1.2.5 - Command Injection

SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.

View Code

CVE-2004-2350 EXPLOITDB php WORKING POC

phpBB <2.0.6 - SQL Injection

SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter.

View Code

CVE-2004-0269 EXPLOITDB php WORKING POC

Francisco Burzi Php-nuke - SQL Injection

SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.

View Code

CVE-2005-2002 EXPLOITDB php WORKING POC

Mambo - SQL Injection

SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.

View Code

EIP-2026-107362 EXPLOITDB text WRITEUP

Geeklog 1.3.x - (Authenticated) SQL Injection

View Code

CVE-2002-1428 EXPLOITDB text WORKING POC

dotProject 0.2.1.5 - Auth Bypass

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.

View Code

EIP-2026-105686 EXPLOITDB text WORKING POC

Cafelog b2 0.6 - Remote File Inclusion

View Code

CVE-2003-0437 EXPLOITDB perl WORKING POC

mnoGoSearch <3.2.10 - RCE

Buffer overflow in search.cgi for mnoGoSearch 3.2.10 allows remote attackers to execute arbitrary code via a long tmplt parameter.

View Code

CVE-2003-0436 EXPLOITDB perl WORKING POC

mnoGoSearch 3.1.20 - RCE

Buffer overflow in search.cgi for mnoGoSearch 3.1.20 allows remote attackers to execute arbitrary code via a long ul parameter.

View Code

CVE-2002-1581 EXPLOITDB text WORKING POC

Mailreader.com <2.3.31 - Path Traversal

Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.

View Code

CVE-2003-1425 EXPLOITDB perl WORKING POC

Cpanel - Improper Input Validation

guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

View Code