4880 matches found
EggBlog 4.0 - SQL Injection
Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrieve exploit Var :...
eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit ========================================================== Author: GiReX Date: 27/03/2008 - 1/04/2008 Added exploit for...
PostNuke 0.764 - Blind SQL Injection
PostNuke 0.764 - Blind SQL Injection !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / =================================================================================================...
PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload
PEEL CMS 3.x - Admin Hash Extraction Arbitrary File Upload !/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Speci...
EasyCalendar <= 4.0tr - Multiple Remote Vulnerabilities
Info: Software: EsayCalendar HomePage: http://myiosoft.com Exploit: Multiple Remote Vulnerabilities High Bug Found By: Jose Luis Gуngora Fernбndez | JosS Contact: sys-projectathotmail.com Web: http://www.spanish-hackers.com Verified in localhost with EsayCalendar 4.0tr and magicquotes Off +...
EasyCalendar <= 4.0tr Multiple Remote Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ EasyCalendar = 4.0tr - Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==-- + JosS ...
AuraCMS <= 2.2.1 (online.php) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ AuraCMS 0 15. @mysqlquery"update useronline set timevisit='$utime' where ipproxy='$uipproxy'"; 16. else 17. @mysqlquery"insert into useronline...
AuraCMS 2.2.1 - X-Forwarded-For HTTP Header Blind SQL Injection
AuraCMS 2.2.1 - X-Forwarded-For HTTP Header Blind SQL Injection !/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor :...
auracms-blindsql.txt
!/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ------------------------------------ Audit...
AuraCMS 2.2.1 - 'X-Forwarded-For' HTTP Header Blind SQL Injection
!/usr/bin/perl -w Indonesian Newhack Security Advisory ------------------------------------ AuraCMS 2.x online.php - Remote Blind SQL Injection Exploit Waktu : Feb 15 2008 01:00PM Software : AuraCMS Versi : 2.0 2.1 2.2.1 Vendor : http://www.auracms.org/ ------------------------------------ Audit...
quicktalk-blindsql.txt
QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit qtfindsearchov.php - - Info --------------------------------------------------------------------------------------- - Author: t0pP8uZz &...
danneo-sql.txt
use specific prefix\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-v - verbose mode\n\n"; echo "tip:\n"; echo "use bigger number of if server is slow\n\n"; echo "php $argv0 http://site.com/ -p=cms\n"; echo "php $argv0...
easycalendar-multi.txt
--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ EasyCalendar 'alert"JosS"%3B --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ JosS +==-- --==+=====================================...
QuickTalk Forum <= 1.6 Remote Blind SQL Injection Exploit
No description provided by source. html head titleQuickTalk Forum = 1.6 Blind SQL Injection Exploit/title script language="Javascript" type="text/javascript" / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection...
QuickTalk Forum 1.6 - Blind SQL Injection
QuickTalk Forum 1.6 - Blind SQL Injection QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit qtfindsearchov.php - - Info...
QuickTalk Forum 1.6 - Blind SQL Injection
QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit qtfindsearchov.php - - Info --------------------------------------------------------------------------------------- - Author: t0pP8uZz &...
QuickTalk Forum <= 1.6 Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= QuickTalk Forum QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit...
Danneo CMS 0.5.1 - Blind SQL Injection
use specific prefix\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-v - verbose mode\n\n"; echo "tip:\n"; echo "use bigger number of if server is slow\n\n"; echo "php $argv0 http://site.com/ -p=cms\n"; echo "php $argv0...
Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385)
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: Urulu Vendor: USystems Subject: Blind SQL Injection Vulnerability Risk: High Author: Daniel Roethlisberger Date: 2008-02-25 CVE Name: CVE-2008-0385 Introduction ------------ An AJAX based Blind SQL Injection vulnerability exists in the Web 2....
Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; echo "WoltLab Burning Board 3.0.X Remote SQL-Injection Exploit by NBBN\n"; start1, 48; / You have to edit this script. / / Works succesfully at 3.0.1. If you enter in 3.0.3 PL1:...