This exploit is a modified version of the pnscan scanner utility which scans a range of IPs to find open Apache Tomcat servers. It then tries a list of login access combinations such as tomcat:tomcat, password:password, admin:admin, admin:password, admin:<nopassword>, and tomcat:<nopassword>. The included perl script can be used to unlock Apache Tomcat servers remotely by using the collected login combinations. It will retrieve either a root or SYSTEM reverse shell depending on the operating system or the equivalent of a reverse shell as the current user tomcat is running as. The exploit might contain metasploit logic.
This exploit is a time-based SQL injection vulnerability in Joomla versions prior to 2.5.1. It allows an attacker to extract data from the database by using a sleep() function and not benchmark(), which is necessary for versions of MySQL prior to 5.0.12. The exploit requires the attacker to know the database name, the users data table name, and the admin password. The attacker can then use the load_file() function to extract the contents of any file on the server.
A complete printing press website script contains all features required for online printing business. An attacker can exploit a SQL injection vulnerability in the product_desc.php script by sending a maliciously crafted HTTP request containing a specially crafted 'pid' parameter.
A SQL injection vulnerability exists in the PRE PRINTING STUDIO website script. An attacker can exploit this vulnerability by sending malicious SQL queries to the vulnerable page. This can allow the attacker to gain access to sensitive information such as usernames, passwords, and other confidential data stored in the database.
ASP Classifieds is vulnerable to SQL Injection. An attacker can exploit this vulnerability by sending a malicious SQL query to the vulnerable parameter 'category' in the 'search.php' page. For example, sending the following payload to the vulnerable parameter will reveal the version of the database: '-1+union+all+select+version()--'
RM Downloader Version 3.1.3.3.2010.06.26 has buffer overflow vulnerability. An attacker can create a malicious .m3u file with a payload that will be executed when the file is opened with RM Downloader Version 3.1.3.3.2010.06.26.
This exploit allows an attacker to read arbitrary files from a vulnerable Tiny Server v1.1.5 web server. The exploit works by sending a specially crafted HTTP request to the vulnerable server, which then responds with the contents of the requested file.
FlexCMS 3.2.1 suffers from multiple CSRF vulnerabilities which could allow an attacker to change any parameters when an authenticated user/admin browses a special crafted web page. In this Advisory, two exploits have been demonstrated: one to change settings of user 'demo' and another to add a page.
A persistent XSS vulnerability was discovered in FLEXCMS 3.2.1, which allows an attacker to inject malicious JavaScript code into the "Display Name" field of a user's profile. This code is then executed when the "Users Online" menu is viewed, allowing the attacker to redirect users, hijack their sessions, or perform other malicious actions.
OneFileCMS is just that. It's a flat, light, one file CMS (Content Management System) entirely contained in an easy-to-implement, highly customizable, database-less PHP script. Coupling a utilitarian code editor with all the basic necessities of an FTP application, OneFileCMS can maintain a whole website completely in-browser without any external programs. Directory Listing, using the 'i' parameter: http://TARGET/onefilecms/onefilecms.php?i=../../../../ Read local files, using the 'f' parameter: http://TARGET/onefilecms/onefilecms.php?f=../../../../etc/passwd http://TARGET/onefilecms/onefilecms.php?f=../../../../var/www/html/onefilecms/onefilecms.php
Services By CQR