搜索 “pin”

不再关注网络安全

inurl:com_pinboard

  • 2010-11-15
  • shdb
  • 1545 阅读

Joomla Component com_pinboard Remote File Upload Vulnerability: https://www.exploit-db.com/exploits/9011

inurl:"com_tupinambis"

  • 2010-11-15
  • shdb
  • 1404 阅读

Joomla/Mambo Tupinambis SQL Injection - CVE: 2009-3434: https://www.exploit-db.com/exploits/9832

intext:"Powered by PCPIN.com" -site:pcpin.com -ihackstuff -"works with" -findlaw

  • 2006-05-04
  • shdb
  • 1190 阅读

this is for PCPIN Chat SQL injection/login bypass and arbitrary local inclusion references:http://retrogod.altervista.org/pcpin_504_xpl.htmlhttp://secunia.com/advisories/19708/

intitle:"phpinfo()" +"mysql.default_password" +"Zend Scripting Language Engine"

  • 2005-06-05
  • shdb
  • 1167 阅读

This will look throught default phpinfo pages for ones that have a default mysql password.

intext:"Powered by X-Cart: shopping cart software" -site:x-cart.com

  • 2005-06-03
  • shdb
  • 1155 阅读

X-Cart (version 4.0.8) has multiple input validation vulnerabilities. There doesn't seem to be any way to search for specific versions of the software with Google. See http://www.securitytracker.com/alerts/2005/May/1014077.html for more infor...

filetype:php inurl:ipinfo.php "Distributed Intrusion Detection System"

  • 2004-12-07
  • shdb
  • 1684 阅读

Dshield is a distributed intrusion detection system. The ipinfo.php script includes a whois lookup form.

phpinfo()

  • 2004-11-18
  • shdb
  • 1205 阅读

this brings up sites with phpinfo(). There is SO much cool stuff in here that you just have to check one out for yourself! I mean full blown system versioning, SSL version, sendmail version and path, ftp, LDAP, SQL info, Apache mods, Apache env va...

"Enter ip" inurl:"php-ping.php"

  • 2004-10-26
  • shdb
  • 1351 阅读

It has been reported that php-ping may be prone to a remote command execution vulnerability that may allow remote attackers to execute commands on vulnerable systems. The problem exists due to insufficient sanitization of shellmetacharacters via t...

VP-ASP Shopping Cart XSS

  • 2004-06-25
  • shdb
  • 1464 阅读

VP-ASP (Virtual Programming - ASP) has won awards both in the US and France. It is now in use in over 70 countries. VP-ASP can be used to build any type of Internet shop and sell anything.According to http://www.securityfocus.com/bid/9164/discussi...

Hassan Consulting's Shopping Cart Version 1.18

  • 2003-07-07
  • shdb
  • 1737 阅读

These servers can be messed with in many ways. One specific way is by way of the "../" bug. This lets you cruise around the web server in a somewhat limited fashion.