This exploit allows an attacker to execute arbitrary commands on a vulnerable phpBB version 2.0.17 or lower. The exploit requires PHP 5 < 5.0.5, register_globals=On, and magic_quotes off. The exploit registers a new user with a malicious signature, which is then executed when the user profile is edited.
Dev <=1.5 'cat' SQL injection is a vulnerability that allows an attacker to inject malicious SQL commands into a vulnerable web application. This vulnerability can be exploited to gain access to the admin MD5 password hash, which can then be used to gain access to the web application.
Exploit for PHP-Fusion 6.00.3 allows remote attackers to execute arbitrary SQL commands via the rating parameter in a post_rating action to news.php.
This proof of concept exploit is for a Cross-site Scripting (XSS) vulnerability in phpBB version 2.0.18 and earlier. The exploit involves a maliciously crafted HTML tag that contains a JavaScript expression that is evaluated by the browser. This expression contains a call to a remote script (c.php) that logs the user's cookie information to a log file. The malicious HTML tag is then sent to the user's browser, which evaluates the expression and sends the cookie information to the remote script.
Microsoft IIS 5.1 is vulnerable to a remote denial of service attack. The exploit is triggered by sending a specially crafted POST request to the _vti_bin directory of the vulnerable server. The exploit code was discovered by Inge Henriksen and coded by Kozan. The exploit only works on folders with Execute Permissions set to 'Scripts & Executables', such as the '_vti_bin' directory. After exploitation is finished, inetinfo.exe will be crashed.
This exploit causes Internet Explorer to crash when a maliciously crafted HTML page is opened. The vulnerability is caused due to an error in the way Internet Explorer handles certain HTML tags. This can be exploited to cause a stack-based buffer overflow by e.g. embedding a maliciously crafted HTML page in an e-mail message or web page.
This exploit is a remote denial of service (DoS) attack against Macromedia Flash Media Server 2. It was discovered by dr_insane and coded by Kozan. The exploit sends a single DoS packet to the target server, causing it to crash.
This exploit allows an attacker to inject malicious SQL commands into the vulnerable application. It can be used to gain access to sensitive information stored in the database, or to execute arbitrary code on the server.
This exploit is a Denial of Service (DoS) attack against Counter Strike 2D versions 0.1.0.1 and prior. The exploit is written in Borland C++ Builder 6 and sends a malicious packet to the target server, causing it to crash. The malicious packet contains a player name in hexadecimal format.
If magic_quotes_gpc is off, an attacker can have any admin/user MD5 password hash. An admin cookie can be built and used to edit any php file on the target system and insert a shell. Commands can then be launched using the inserted shell.
Services By CQR