what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 25 of 38

Files from CorryL

Ad Manager Pro 4 Local File Inclusion

Posted Aug 23, 2012

Authored by CorryL

Ad Manager Pro version 4 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | e3132a129e14dfce6cc2c611ec903aa79fc4e37033ab283a599a78581d7a08de

Download | Favorite | View

WordPress Bruteforce Script

Posted Apr 29, 2012

Authored by CorryL

This is a simple bash script for bruteforcing WordPress.

tags | cracker, bash

SHA-256 | a04595fb1fae7483302800dc402320dae1656bd040d010c93927bb2d7e92208a

Download | Favorite | View

ImgPals Photo Host 1.0 Stable Admin Account Deactivation

Posted Feb 28, 2012

Authored by CorryL

ImgPals Photo Host version 1.0 STABLE suffers from a remote administrative account disabling vulnerability.

tags | exploit, remote

SHA-256 | 8c780762899fca7c8bc34cb516d77adf4aed068e1971cb7d7c17d6457fafd235

Download | Favorite | View

Mobile MP3 Search Engine 2.0 HTTP Response Splitting

Posted Feb 24, 2012

Authored by CorryL

Mobile MP3 Search Engine version 2.0 suffers from a HTTP response splitting vulnerability.

tags | exploit, web

SHA-256 | 4a234a62d9055e4a817636cab81811ebdcb76770efd193cc42471310e95ae02f

Download | Favorite | View

YVS Image Gallery SQL Injection

Posted Feb 24, 2012

Authored by CorryL

YVS Image Gallery version 0.0.0.1 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 57c8b4b331c976402d8ecbf2a7336a8a495b9664d40c2aa1baa1066165e7c43c

Download | Favorite | View

phptraffica143-bypass.txt

Posted Jul 7, 2007

Authored by CorryL

phpTrafficA versions 1.4.3 and below suffer from an administrative bypass vulnerability via cookie manipulation.

tags | exploit, bypass

SHA-256 | d83f507525ff57f2c8d002bf6a8aaf48f7647088f2218c1ada710cf6111f6c4c

Download | Favorite | View

phplistpro-xss.txt

Posted Jun 19, 2007

Authored by CorryL

phpListPro version 2.0.1 suffers from a cross site scripting flaw.

tags | advisory, xss

SHA-256 | 4ac08140ae3c4f00c6daf5b11559df1a45663acd0a1fd3b36d12bd4c45de1e95

Download | Favorite | View

lrcf-inject.txt

Posted Jun 11, 2007

Authored by CorryL

Link Request Contact Form version 3.4 suffers from a remote code injection vulnerability. Full exploit provided.

tags | exploit, remote

SHA-256 | 0423208100e20e1bcf2100f3deddf8c13824689edc37c5cec1338f65e81ec3a2

Download | Favorite | View

gmttmusic-xss.txt

Posted May 23, 2007

Authored by CorryL

GMTT Music Distro version 1.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 1a0899d47b570e020d1cb2e46605734664563b5be76559eac2a7d188516cc3fc

Download | Favorite | View

miniwebshop2-xss.txt

Posted May 8, 2007

Authored by CorryL

Mini Web Shop version 2 suffers from cross site scripting vulnerabilities.

tags | exploit, web, vulnerability, xss

SHA-256 | 9c7fcbdd6d917bb63e85ace22145a7a8102f67df152c7349b967432e894d1477

Download | Favorite | View

tyger-sqlxss.txt

Posted Mar 8, 2007

Authored by CorryL

Tyger bug tracking system version 1.1.3 suffers from SQL injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 0a6b81b6f0f669ee5e6eebdb06a55621e97da19d9ed0ef0bd07b8fa5c834cf26

Download | Favorite | View

ccs-xss.txt

Posted Feb 24, 2007

Authored by CorryL

Call Center Software version 0.93 is susceptible to a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 22f055d083af87eb36eefdc65c30e70c2ac66974c838440895210d0c279c1baf

Download | Favorite | View

siteman1111-disclose.txt

Posted Jan 27, 2007

Authored by CorryL | Site x0n3-h4ck.org

Siteman version 1.1.11 suffers from a remote password disclosure flaw.

tags | exploit, remote, info disclosure

SHA-256 | 9c34460266ceba58da69e99b79c232f3c39a1cc84eb51b847fc0de7f563f296a

Download | Favorite | View

siteman-pass.txt

Posted Jan 27, 2007

Authored by CorryL | Site x0n3-h4ck.org

Siteman version 2.0.x2 suffers from a remote password disclosure flaw.

tags | exploit, remote

SHA-256 | a0d7d79440348673ae6422980fe047110b731c64082359ca4df99be982eddc89

Download | Favorite | View

bitweaver-xss.txt

Posted Jan 24, 2007

Authored by CorryL | Site x0n3-h4ck.org

Bitweaver version 1.3.1 is susceptible to cross site scripting attacks.

tags | exploit, xss

SHA-256 | 3c529894f4f1dae48debfb510b1132234ee5cd8c473db9dfd614319f61e4c675

Download | Favorite | View

sabros17-xss.txt

Posted Jan 20, 2007

Authored by CorryL | Site x0n3-h4ck.org

sabros.us version 1.7 is susceptible to a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 6d802f5d2b42ab368863a90cfce90d4d367652660e2e4acc765cbe103f429e49

Download | Favorite | View

mybloggie215-xss.txt

Posted Jan 20, 2007

Authored by CorryL | Site x0n3-h4ck.org

myBloggie version 2.1.5 is susceptible to cross site scripting attacks.

tags | exploit, xss

SHA-256 | b7a360330a323b3890c837349bbe882e68310b3af24f5f4e13aa5d876fabf840

Download | Favorite | View

smefilemailer-sql.txt

Posted Jan 20, 2007

Authored by CorryL | Site x0n3-h4ck.org

SmE FileMailer version 1.21 suffers from a SQL injection vulnerability.

tags | exploit, sql injection

SHA-256 | 3f63e395d35d4b1193354a664932e18f37741341e9c378c044d095922130a268

Download | Favorite | View

flog112-disclose.txt

Posted Jan 13, 2007

Authored by CorryL | Site x0n3-h4ck.org

Flog version 1.1.2 suffers from a remote administrative password disclosure flaw.

tags | exploit, remote, info disclosure

SHA-256 | 2e4f7ad462b6365de8f6c4664fd8eccd0cf6de658459cca38c7282463a48f1d5

Download | Favorite | View

logaheadunu10-exec.txt

Posted Dec 28, 2006

Authored by CorryL

logahead UNU edition version 1.0 is susceptible to upload and code execution vulnerabilities.

tags | advisory, vulnerability, code execution

SHA-256 | 27b203654d10a87234e276e6dcddb31fd185b6177eb6384ef4ccb551260105e2

Download | Favorite | View

timberwolf122-xss.txt

Posted Dec 28, 2006

Authored by CorryL | Site x0n3-h4ck.org

TimberWolf version 1.2.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 690e8122748e9708eed54484776dcbeeb8466f22e2e5029b43c8bf222e553cd8

Download | Favorite | View

paypalXSScorry.txt

Posted Nov 7, 2006

Authored by CorryL | Site x0n3-h4ck.org

PayPal.com suffered from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 22d98d91409ede316d23ed907459afbc3116834d535af7e20e9bc825d40944de

Download | Favorite | View

essentia215.txt

Posted Nov 6, 2006

Authored by CorryL | Site x0n3-h4ck.org

Essentia Web Server version 2.15 suffers from a buffer overflow vulnerability. Denial of service exploit included.

tags | exploit, web, denial of service, overflow

SHA-256 | b6a275a0406f1b65144837ffc8082c6f99e97e4d2b21537d389ac4ee29f4ec45

Download | Favorite | View

drakeCMS.txt

Posted Nov 6, 2006

Authored by CorryL | Site x0n3-h4ck.org

Drake CMS version 0.2 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 970ad4149dcd4090f9a11dae899e49be43d3debdada03f5c9e220dcce04a2a42

Download | Favorite | View

DEVWeb-1.5.txt

Posted Oct 20, 2006

Authored by CorryL | Site x0n3-h4ck.org

DEV Web Manager System versions less than or equal to 1.5 cross site scripting exploit.

tags | exploit, web, xss

SHA-256 | 230787c742f05b737de56c0b48b334ec4de1a9b89c708eb321c94cbcb104308d

Download | Favorite | View