vBulletin vBay 1.1.9 - Error-Based SQL Injection

vBulletin vBay 1.1.9 - Error-Based SQL Injection !/usr/bin/env python -W ignore::DeprecationWarning """ VBay input variable "type" being assigned with the datatype NOHTML. Using this data type allows malicious attacks to still be executed. At line 448, it is used within the insert into statement,...

Multiple SQL Injection vulnerabilities in ClipBucket

High-Tech Bridge Security Research Lab discovered multiple vulnerabilities in ClipBucket, which can be exploited to perform SQL Injection attacks. 1 Multiple SQL Injections in ClipBucket: CVE-2012-5849 1.1 The vulnerability exists due to improper sanitation of input in multiple parameters within...

webERP 4.08.4 SQL Injection

Exploit Title: webERP =4.08.4 WorkOrderEntry.php SQL Injection Vulnerability Date: 14/09/2012 Exploit Author: modpr0be modpr0beatspentera.com Vendor Homepage: http://www.weberp.org Software Link: http://sourceforge.net/projects/web-erp/files/ Version: 4.08.4 Tested on: Windows 2003 Standard...

Website Created By Triad SQL Injection

| | | | '| | | | ' \ / \ ' \ | | | ' | | | \ / / | | | || | | | / | | | | | | | | | || | = 5.0 AND error-based - WHERE or HAVING clause Payload: id=5' AND SELECT 8596 FROMSELECT COUNT,CONCAT0x3a6974713a,SELECT CASE WHEN 8596=8596 THEN 1 ELSE 0 END,0x3a6a6c763a,FLOORRAND02x FROM...

Support4Arabs Pages 2.0 - SQL Injection

Support4Arabs Pages 2.0 - SQL Injection Exploit Title: Support4Arabs Pages v2.0 Remote SQL Error Based Injection Vulnerability Date: 04/9/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.support4arabs.com/ Software Link:...

Support4Arabs Pages 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Support4Arabs Pages v2.0 Remote SQL Error Based Injection Vulnerability Date: 04/9/2012 Author: L0n3ly-H34rT Contact: email protected My Site: http://se3c.blogspot.com/ Vendor Link: http://www.support4arabs.com/ Software Link:...

Sitemax Maestro 2.0 SQL Injection / Local File Inclusion Vulnerability

Exploit for php platform in category web applications ======================================== Vulnerable Software: Sitemax Maestro v. 2.0 from http://sitemax.am/ Sitemax Maestro v. 2.0 Vendor: http://sitemax.am/ License Type: Commercial Discovered and Exploited in Wild...

Support4Arabs Pages 2.0 - SQL Injection

Exploit Title: Support4Arabs Pages v2.0 Remote SQL Error Based Injection Vulnerability Date: 04/9/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.support4arabs.com/ Software Link:...

1024cms 2.1.1 SQL Injection

Exploit Title: 1024cms 0 mysqlquery"UPDATE ".$prefix."online SET time='".$now."' WHERE ip='".$ip."'" or die"WHOSONLINE::: Cannot update user: ".mysqlerror; else mysqlquery"INSERT INTO ".$prefix."online time, ip, username, location, uid VALUES '".$now."', '".$ip."', '".$username."', '".$location."...

YourArcadeScript 2.4 - index.php?id SQL Injection

YourArcadeScript 2.4 - index.php?id SQL Injection Exploit Title: YourArcadeScript 2.4 SQLi Vulnerability Version: 2.4 Date: 17/08/2012 Author: DaOne LCA Software Link: http://www.yourarcadescript.com Google Dork: intext:"Powered by YourArcadeScript 2.4" Exploit...

YourArcadeScript 2.4 SQL Injection

Exploit Title: YourArcadeScript 2.4 SQLi Vulnerability Version: 2.4 Date: 17/08/2012 Author: DaOne LCA Software Link: http://www.yourarcadescript.com Google Dork: intext:"Powered by YourArcadeScript 2.4" Exploit http://localhost/index.php?act=cat&id=Error Based Injection thanks to : All LibyanCA...

CityVariety SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: CityVariety MySQL error based injection Date: 06/05/2012 Author: ReZK2LL Team : k2ll33d - Farouk reseau - ala Manai Vendor : http://www.cityvariety.co.th Version: N/A Category: webapps Google dork: intext:"powered by CityVariety...

用友网站SQL Injection

简要描述： 某二级站存在注入，可报错，可跨库。 详细说明： dbo权限 漏洞证明： 报错注入：...

Siemens and Canon's Databases exploited by Team INTRA

Siemens and Canon's Databases exploited by Team INTRA Recently a hacker known as "JoinSe7en" from Team INTRA claims to have hacked into subdomains of Canon and Siemens. Apparently, the hacker has found and exploited a Blind SQL Injection vulnerability in Canon's website and a Error based SQL...

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project

WAVSEP 1.0.3 – Web Application Vulnerability Scanner Evaluation Project A vulnerable web application designed to help assessing the features, quality and accuracy of web application vulnerability scanners. This evaluation platform contains a collection of unique vulnerable web pages that can be...

Elgg 1.8 beta2 SQL Injection

Exploit for php platform in category web applications Elgg 1.8 beta2 and prior to 1.7.11 'containerguid' and 'ownerguid' SQL Injection Vendor URL: http://www.elgg.org/ Advisore: http://lostmon.blogspot.com/2011/08/elgg-18-beta2-and-prior-to-1711.html Vendor notify: YES exploit available: YES...

WebFly CMS SQL Injection

$ Exploit Title : WebFly CMS Error Based SQL Injection Vulnerability $ Versions Affected : ALL $ Date : 21-03-2011 $ Author : MasterGipy $ Email : mastergipy at gmail.com $ Bug : Error Based SQL Injection Vulnerability $ Google Dork : None $ Vulnerable code in /web/inc/paginas/inc.paginas.top.php...

phpBB Modified by (News CMS) <= Remote Based SQL Injection

Exploit for php platform in category web applications ========================================================== phpBB Modified by News CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 ...

Pegasus Technology - Remote (showproduct.php) SQL Injection

Exploit for php platform in category web applications =========================================================== Pegasus Technology - Remote showproduct.php SQL Injection ===========================================================...

Customer Paradigm <= (product.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================== Customer Paradigm Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0...