faphoto-sql.txt

AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile Function in mysql and see admin Username and...

runcmsphoto-sql.txt

RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAİL : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 : inurl:photo "powered by runcms" EXPLOIT : admin...

CVE-2008-1393

Plone CMS before version 3 (e.g., 3.0.5 and likely other 3.x) stores a base64-encoded form of the admin username and password in the __ac cookie, enabling an attacker who can sniff network traffic to obtain administrative privileges. Connected advisories (GHSA-593C-J348-F3GV; OSV) corroborate imp...

phpmynewsletter-sql.txt

!/usr/bin/php Date: 03-10-08 Conditions: magicquotesgpc=Off This exploit gets adminpass and adminemail from pmnlconfig. / print "\n"; print " PHPMyNewsletter \n\n"; if$argc\n"; $url = $argv1; $c =...

SellOwnHouse login SQL Injection

SellOwnHouse login SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORK 1 : "2008 SellOwnHouse" DORK 2 : "2007 SellOwnHouse" EXPLOIT : Username: anything' OR 'x'='x Password: anything' OR 'x'='x later attacker can see real admin name and pass in Edit Your Account S@BUN...

wordpressforum-sql.txt

Wordpress FORUM ALL VERSİON SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: forum pageid "topic" DORK 2 : allinurl: pageid "topic" admin pass and name small soo attacker can see username and pass word under page HO...

sellownhouse-sql.txt

SellOwnHouse login SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORK 1 : "2008 SellOwnHouse" DORK 2 : "2007 SellOwnHouse" EXPLOIT : Username: anything' OR 'x'='x Password: anything' OR 'x'='x later attacker can see real admin name and pass in Edit Your Account S@BUN...

BookmarkX script 2007 (topicid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== BookmarkX script 2007 topicid Remote SQL Injection Vulnerability ================================================================== BookmarkX scriptPowered by...

phpnuke80-sql.txt

version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...

boastMachine <=3.1 SQL Injection Vulnerbility

...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...

famp3-sql.txt

FaScript FaMp3 v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.fascript.com/persian.rar Injection Adress : http://127.0.0.1/famp3/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfi...

FaScript FaPersianHack v1 (show.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FaScript FaPersianHack v1 show.php SQL Injection Vulnerability ================================================================ FaScript FaPersianHack v1 Remote Sql Injection...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

mailmachine-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

zblog-sql.txt

zBlog v1.2 Remote SQL Injection Exploit AUTHOR : H-T Team HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : zBlog Version : 1.2 Site : http://kaxz01.free.fr/ Download : http://kaxz01.free.fr/fichiers/zBlog.zip EXPLOITS : 1...

Adult Script 1.6.5 - Multiple SQL Injections

Adult Script 1.6.5 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Adult Script 1.6.5 - Multiple SQL Injections

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

CVE-2007-6502

Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via 1 the AdminName and AdminLevel parameters to fp2000/NEWSRVR.asp, which discloses usernames; and 2 certain XML HTTP requests to hosting/css.asp using Microsoft.XMLHTTP or...

Eurologon CMS - Multiple SQL Injections

Eurologon CMS - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

DeluxeBB <= 1.09 Remote Admin Email Change Exploit

Exploit for unknown platform in category web applications ================================================== DeluxeBB unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; So, editing cookie "membercookie" you can change remote...