what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 16 of 16

Files from DaOne

Pligg CMS 2.0.0rc2 Cross Site Request Forgery

Posted Aug 15, 2013

Authored by DaOne

Pligg CMS versions 2.0.0rc2 and below suffer from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | ff92bd903b53f3d80aaea2d128b6371304d4ac04de3a162a6b5413b95625956a

Download | Favorite | View

KCFinder 2.51 Local File Disclosure

Posted Aug 15, 2013

Authored by DaOne

KCFinder version 2.51 suffers from a local file disclosure vulnerability.

tags | exploit, local, info disclosure

SHA-256 | e5b2f68a7dbe3eea0f99b54f87d0dd99dde65a924630d4d71713a48fe3378434

Download | Favorite | View

Ipswitch IMail 11.01 Cross Site Scripting

Posted Apr 29, 2013

Authored by DaOne

Ipswitch IMail version 11.01 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 994dfe38a03dadf23ee63272381e22efa35b41a469d160c4208efb44566257f9

Download | Favorite | View

AContent 1.3 Local File Inclusion

Posted Mar 23, 2013

Authored by DaOne

AContent version 1.3 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

SHA-256 | dc8fa3990193a6cdff88f129fadbb8cd29020fb630f73f75c5ed020e4615685e

Download | Favorite | View

Auxilium RateMyPet Arbitrary File Upload

Posted Sep 25, 2012

Authored by sinn3r, DaOne | Site metasploit.com

This Metasploit module exploits a vulnerability found in Auxilium RateMyPet's. The site banner uploading feature can be abused to upload an arbitrary file to the web server, which is accessible in the 'banner' directory, thus allowing remote code execution.

tags | exploit, remote, web, arbitrary, code execution

advisories | OSVDB-85554

SHA-256 | a7035c9bcda8b50beee473cbedd67c5154d287ee3c5a962c820f3de3648682e5

Download | Favorite | View

Auxilium PetRatePro SQL Injection / Shell Upload

Posted Sep 16, 2012

Authored by DaOne

Auxilium PetRatePro suffers from remote shell upload, add administrator, and remote SQL injection vulnerabilities.

tags | exploit, remote, shell, vulnerability, sql injection

SHA-256 | 6024f5b4c8646cdc47ee02ffd2991ddc141178ad096133a6cc83d5f57b2431b2

Download | Favorite | View

Clipster Video Cross Site Scripting

Posted Sep 8, 2012

Authored by DaOne

Clipster Video suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 4ca47a57fcfea9ca4c0e1642024180c849092e119111d6049918e17387e0721e

Download | Favorite | View

AV Arcade Free Edition Blind SQL Injection

Posted Sep 3, 2012

Authored by DaOne

AV Arcade Free Edition suffers from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 4824ee1aa6674200db80c124a518a0989e057c9427cda66c7cd6eaa0d9827641

Download | Favorite | View

Booking System Pro Cross Site Request Forgery

Posted Aug 30, 2012

Authored by DaOne

Booking System Pro suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | d6537cfa113bde257fb118f3bc449e9523674fe97c7780c4ed292493c4c46941

Download | Favorite | View

RV Shopping Cart Cross Site Request Forgery

Posted Aug 29, 2012

Authored by DaOne

RV Shopping Cart suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | ab31b6821553d20ce09762d09990530537d2efbdc776a58973ce3b6e2051bfdb

Download | Favorite | View

RV Article Publisher Cross Site Request Forgery

Posted Aug 29, 2012

Authored by DaOne

RV Article Publisher suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 02a459cfd58a5abb7e58a15a6e14c09b22eaccd57bd2a75287901667e70ad6f3

Download | Favorite | View

VamCart 0.9 Cross Site Request Forgery

Posted Aug 22, 2012

Authored by DaOne

VamCart version 0.9 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 44b4331ea7a4adfb5da06983201511d8e96dbbfa64003c6c419310507d3d5a89

Download | Favorite | View

ClipBucket 2.5 Cross Site Request Forgery

Posted Aug 18, 2012

Authored by DaOne

ClipBucket version 2.5 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 215f31d79beeb64bdd951a84a80fada6fd029809053de09f547bcc6985301ca5

Download | Favorite | View

YourArcadeScript 2.4 SQL Injection

Posted Aug 18, 2012

Authored by DaOne

YourArcadeScript version 2.4 suffers from a remote SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | 005c851c7e9d7b351da85ff45b6c2894209fbe710f2a8f44e606ea4085fa2af0

Download | Favorite | View

Jaow CMS 2.3 Cross Site Request Forgery

Posted Aug 17, 2012

Authored by DaOne

Jaow CMS version 2.3 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | c657173514edace566f414ca34f718968863e18646b9923687c4ad2e09b82608

Download | Favorite | View

ProQuiz 2.0.2 Cross Site Request Forgery

Posted Aug 17, 2012

Authored by DaOne

ProQuiz version 2.0.2 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 1d3692f82eccc72015fdd11936a3d8a2526c9cdc5a3e7bfa34d939d1a50b1171

Download | Favorite | View