CMS Boys SQL Injection

/ Name : CMS BOYS id Multiple SQL Injection WebSite : http://www.cmsboys.com/ Demo : http://www.cmsboys.com/democms/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , PR0f.SELLIM , Dyle , Achille Dark3r , geeksec.com / 1st : File : newsdetail.php , GET : id...

PHPBB 3.0 SQL 0day-vulnerability warning-the black bar safety net

Code not tested as to use the moderator privileges of users can perform !/ usr/bin/php-q-d shortopentag=on 1 2 6 $result.=" ."; else $resu...

PHPBB 3.0 0day

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure\n"; echo "by Hackerz5 [email protected]\n"; echo "site: http://hackerz5.com\n"; echo "dork, version specific: "Powered by phpBB 2002,...

CMScontrol 7.x File Upload

Exploit for unknown platform in category web applications ========================== CMScontrol 7.x File Upload ========================== CMScontrol 7.x File Upload Author : Cyber945 Bug Type : File Upload Infection : Adminin bilgileri alinabilir. Dork : inurl:"index.php?idmenu="...

Zeeways Technology (product_desc.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Zeeways Technology productdesc.php SQL Injection Vulnerability ================================================================= Zeeways Technology productdesc.php SQL...

YP Portal MS-Pro Surumu 1.0 Database Disclosure

======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | DAte : 16/12/200...

D-Tendencia Bt 2008 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== D-Tendencia Bt 2008 SQL Injection Vulnerability =============================================== / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

Mail Manager Pro XSRF (Change Admin Password)

Exploit for unknown platform in category web applications ============================================= Mail Manager Pro XSRF Change Admin Password ============================================= ----------------------------------------------------------------------------------------------- Title:...

Dow Group (new.php) SQL Injection

No description provided by source. ===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

Allomani Movies Clips 2.7.0 - Blind SQL Injection

Allomani Movies Clips 2.7.0 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani movies & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.co...

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...

ZenPhoto 1.2.5 - Completely Blind SQL Injection

/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...

Virtue Book Store SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

Virtue Book Store - 'cid' SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

ZeusCart 2.3 SQL Injection

!usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip | -Bug: Sql Injection | -Found: by...

ECSHOP Mall system filter is not strict lead to SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Add time: 2009-05-25 System number: WAVDB-0 1 4 3 1 Affected version: ECSHOP 2.6.1/2.6.2 Program description: ECSHOP is an open source free online store system. By the professional development team upgrade and maintenance, to provide you with timely and efficient technical support, you can also...

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting

my-colex 1.4.2 - Authentication Bypass SQL Injection Cross-Site Scripting || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

CVE-2009-1550

CVE-2009-1550 affects Zakkis Technology ABC Advertise 1.0. The issue is an access restriction flaw in admin.inc.php that may allow remote attackers to obtain the administrator login name and password via a direct request. Connected documents confirm this description but do not provide a patch or ...

Infopop UBB.Threads Admin Credentials via SQL Injection

No description provided by source. Background: ----------- SQL injection has previously been discovered \ http://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the \ database, but stores the admin users' passwor...