phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Triton CMS Pro (X-Forwarded-For) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Triton CMS Pro X-Forwarded-For Blind SQL Injection Exploit ============================================================ !/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL...

Pivot 1.40.5 - Dreamwind load_template() Credentials Disclosure

Pivot 1.40.5 - Dreamwind loadtemplate Credentials Disclosure ?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind'...

Pivot 1.40.5 Dreamwind load_template() Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Pivot 1.40.5 Dreamwind loadtemplate Credentials Disclosure Exploit ===================================================================== ?php / Pivot 1.40.5 'Dreamwind'...

Pivot 1.40.5 - Dreamwind 'load_template()' Credentials Disclosure

?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...

Scientific Image DataBase 0.41 - Blind SQL Injection

Scientific Image DataBase 0.41 - Blind SQL Injection !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr,...

AJ Auction v1 (id) Remote SQL Injection Vulnerability

No description provided by source. AJ Auction OOPD V.1 SQL Injection Vulnerability ======================================================== Author: Hussin X = = Home : www.tryag.cc/cc = =...

cartweaver3-sql.txt

!/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection: http://target/path/details.php?prodId=SQL Gr33tz go to: b!zZ!t,...

Cartweaver 3 - 'prodId' Blind SQL Injection

!/usr/bin/perl Cartweaver 3 PHP Blind SQL Injection Substring Vulnerability Bug by: h0yt3r Dork: n/a brainusing required Releasing it to the public No error messages are being returned. Exploit need a vaild Product ID! SQL Injection: http://target/path/details.php?prodId=SQL Gr33tz go to: b!zZ!t,...

Yuhhu 2008 SuperStar (board) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Yuhhu 2008 SuperStar board Remote SQL Injection Exploit ========================================================= ."; $bul=pregmatch$ara,$tuttum,$rmx;...

CVE-2008-2488

admin/userform.php in RoomPHPlanning 1.5 does not require administrative credentials, which allows remote authenticated users to create new admin accounts...

comicshout-sql.txt

ComicShout Remote 2.5 SQL Injection Vulnerability by D3m0n a.k.a Niiub Home: www.bl4ck-b0x-info niiubatbl4ck-b0x.info Exploit: /index.php?comicid=-1+UNION+SELECT+1,2,3,concatsiteadmin,char58,sitepass,5,6+FROM+setup/ Admin PA: admin.php Greetz: dun - sidpsycho - Kacper...

AJ Auction <= 6.2.1 (classifide_ad.php) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Auction = 6.2.1 classifidead.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==...

AJ Classifieds 2008 (index.php) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Classifieds 2008 index.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==--...

AJ Dating 1.0 (view_profile.php) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Dating 1.0 viewprofile.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==--...

AJ Article 1.0 (featured_article.php) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ AJ Article 1.0 featuredarticle.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-...

Feedback and Rating Script 1.0 (detail.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Feedback and Rating Script 1.0 detail.php SQL Injection Vulnerability =======================================================================...

Feedback and Rating Script 1.0 - 'detail.php' SQL Injection

--==+================================================================================+==-- --==+ Feedback and Rating Script 1.0 detail.php Remote SQL Injection Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz...

Feedback and Rating Script 1.0 (detail.php) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Feedback and Rating Script 1.0 detail.php Remote SQL Injection Vulnerability +==--...

zeuscart-sql.txt

--==+================================================================================+==-- --==+ ZeusCart = 2.0 categorylist.php Remote SQL Injection Vulnerbility +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On...