GalleryPal FE 1.5- Auth Bypass

No description provided by source. ------------------------------------------------------------ GalleryPal FE v1.5Auth Bypass TYPE:Remote SQL Injection Vulnerability ---------------------------------------------------------- author: R3d-D3v!L Date: 15.11.2008 Home: www.ahacker.net contact: N/A...

MDPro Module CWGuestBook <= 2.1 - Remote SQL Injection Vulnerability

No description provided by source. Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

IPBProArcade 2.5 - Remote SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11719/info A remote SQL injection vulnerability reportedly affects ipbProArcade. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in an SQL query. An attacke...

PHP Webquest <= 2.5 (id_actividad) Remote SQL Injection Exploit

No description provided by source. / script name : phpwebquest script version : 2.5 script website : http://phpwebquest.org Bug Finder : D4realTeaM 'unkn0wnX','n3t-mapper','ToxiC350'; injected file : webquest/soportederechaw.php Variable : idactividad Contact : n3t-mapp3r At hotmail dot com,is14m...

autoDealer <= 2.0 (detail.asp iPro) Remote SQL Injection Vulnerability

No description provided by source. Title : autoDealer = 2.0 iPro Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.aspsiteware.com $$ : $60.00 SQL--------------------------------------------------------- http://target/path//detail.asp?iPro=SQL Example:...

Def-Blog <= 1.0.3 (comadd.php) Remote SQL Injection Vulnerability

No description provided by source. ============================================================================================== Def-Blog = v1.0.1 article Remote SQL Injection Exploit =============================================================================================== Critical Level :...

webSPELL <= 4.01.01 (getsquad) Remote SQL Injection Exploit

No description provided by source. WebSPELL = 4.01.01 getsquad Remote SQL Injection Exploit by: Kiba EXPLOIT: http://PAGE/PATH/index.php?site=squads&getsquad=Where+1=0+Union+Select+1,1,username,1,password,1+from+PREFIXuser/ REPLACE: if the website is http://yourwebsite.de/webspell/index.php PAGE...

5 star review (xss/sql) Multiple Vulnerabilities

No description provided by source. Viva IslaM Viva IslaM XSS / Remote SQL Injection Five Star Review recommend.php itemid http://review-script.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploites :- User Exploite...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

How2ASP.net Webboard <= 4.1 - Remote SQL Injection Vulnerability

No description provided by source. ========================================================== How2ASP.net Webboard 4.1 Remote SQL Injection Vulnerability ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Undergrou...

Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability

No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...

SimpleBlog <= 2.0 (comments.asp) Remote SQL Injection Vulnerability

No description provided by source. SimpleBlog 2.0 = comments.asp SQL Injection Exploit - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] Googledork | Powered By SimpleBlog 2.0 - - - - - - - - - - - - - - - - - - -...

Mlffat 2.2 - Remote Blind SQL Injection Exploit

No description provided by source. ?php inisetmaxexecutiontime,0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Mlffat 2.2 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.mlffat.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ|...

Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...

xBtiTracker Remote SQL Injection Vulnerability

No description provided by source. Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam http://inattack.ru/ via Dominus Software Link: http://www.btiteam.org/ Version: xbtit v.2.0.0 - revision 559 and older Tested on: xbtit v.2.0.0 - revision 559 Code :...

webSPELL <= 4.01 (title_op) Remote SQL Injection Exploit

No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die oo error - cannot load curl extension!; function xssheader echo...

WoltLab Burning Book <= 1.1.2 - Remote SQL Injection

No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; dieuse ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n if !$ARGV0;$ARGV1='' i...

ibProArcade <= 3.3.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ibProArcade = v3.3.0 sql injection exploit coded by 1dt.w0lf RST/GHC THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; BEGIN if$^O eq 'MSWin32' require Win32::Console;...

MercuryBoard <= 1.1.4 (User-Agent) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- MercuryBoard = 1.1.4 User-Agent SQL injection / privilege escalation exploit php version by rgod [email protected] site:...

PHP Links <= 1.3 (vote.php id) Remote SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : Houssamix From H-T Team = Script : PHP Links from DeltaScripts = 1.3 ...