# Title: UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability
# EDB-ID: 11261
# CVE-ID: ()
# OSVDB-ID: ()
# Author: indoushka
# Published: 2010-01-26
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
================================================
| # Title : UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability
| # Author : indoushka
| # [...]

Continue reading...

# Title: Joomla 1.5.12 connect back exploit
# EDB-ID: 11262
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Nikola Petrov
# Published: 2010-01-26
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
#!/usr/bin/php
/*
Copyright (c) ITIX LTD
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either [...]

Continue reading...

# Title: Joomla 1.5.12 read/exec remote files
# EDB-ID: 11263
# CVE-ID: ()
# OSVDB-ID: ()
# Author: Nikoal Petrov
# Published: 2010-01-26
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
/*
Copyright (c) ITIX LTD
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either [...]

Continue reading...

# Title: Status2k Remote Add Admin Exploit
# EDB-ID: 11258
# CVE-ID: ()
# OSVDB-ID: ()
# Author: alnjm33
# Published: 2010-01-25
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Exploit Title : status2k Remote Add Admin Exploit
Author: alnjm33
Software Link: it cost 24.95 / y
Script Site : http://www.status2k.com/buynow.html
Version: 1
Tested on: Version 1
My home : Sec-war.com
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
==========================================Dork===
( allinurl:dynamicimg.php )
================================Exploit============
status2k Remote Add Admin
<form action=”http://server/Status2k/admin/options/users.php” [...]

Continue reading...

# Title: Joomla (com_mochigames) SQL Injection Vulnerability
# EDB-ID: 11243
# CVE-ID: ()
# OSVDB-ID: ()
# Author: B-HUNT3|2
# Published: 2010-01-24
# Verified: no
# Download Exploit Code
# Download N/A
view source
print?
[~]>> …[BEGIN ADVISORY]…
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[~]>> RESEARCHER: B-HUNT3|2
[~]>> CONTACT: bhunt3r[at_no_spam]gmail[dot_no_spam]com
[~]>> TESTED ON: LocalHost
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[~]>> DESCRIPTION: Input var id is vulnerable to SQL Code Injection
[~]>> AFFECTED VERSIONS: Confirmed in 0.51 but probably other versions also
[~]>> RISK: [...]

Continue reading...