Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Advanced Image Hosting AIH 2.1 Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Advanced Image Host Script Powered by...

CVE-2008-2018

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '' and '' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "user.password"...

siteman2x-multi.txt

Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr IRCRASH BUGTRA...

Siteman 2.x - Code Execution Local File Inclusion Cross-Site Scripting

Siteman 2.x - Code Execution Local File Inclusion Cross-Site Scripting Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar...

Siteman 2.x (EXEC/LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Siteman 2.x EXEC/LFI/XSS Multiple Remote Vulnerabilities ========================================================== Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE...

Prediction Football 1.x - matchid SQL Injection

Prediction Football 1.x - matchid SQL Injection / Prediction Football v 1.x Remote SQL INJECTION Discovered by 0in from Dark-Coders Programming & Security Group. !!!!!! http://dark-coders.4rh.eu !!!!!! Contact: 0indotemailatgmaildotcom Greetz to all Dark-Coders Group Members: DieAngel, Sun8hclf,...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== My Gaming Ladder = 7.5 ladderid SQL Injection Vulnerability ==============================================================...

Software Zone Remote SQL Injection Vulnlerabilities

No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take sev...

Vastal I-Tech Software Zone - cat_id SQL Injection

Vastal I-Tech Software Zone - catid SQL Injection --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

softwarezone-sql.txt

--==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...

eggblog40-sql.txt

Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrieve exploit Var :...

EggBlog 4.0 - SQL Injection

Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrieve exploit Var :...

destar 0.2.2-5 Arbitrary Add Admin User Exploit

No description provided by source. !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded by a non root user http://nonroot.blogspot.com/ Enero 2008 This is a PoC, please use it just for learning how to exploit something use: $python ./exploitcode.py...

destar 0.2.2-5 Arbitrary Add Admin User Exploit

Exploit for unknown platform in category web applications =============================================== destar 0.2.2-5 Arbitrary Add Admin User Exploit =============================================== !/usr/bin/python Exploit for destar 0.2.2-5, tested on Linux Debian Bug found and exploit coded...

Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection

--==+================================================================================+==-- --==+ Forum Pay Per Post SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

BoastMachine 3.1 - mail.php id SQL Injection

BoastMachine 3.1 - mail.php id SQL Injection ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &...

BoastMachine 3.1 - 'mail.php' id SQL Injection

...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...