3860 matches found
CzarNews <= 1.20 (Account Hijacking) Remote SQL Injection Vuln
首先登陆一个CzarNews 1.20 版本的网站。 2. 打开登陆页面,然后在地址栏中输入 javascript:document.cookie="recook=' or ''=',' or ''='";void0; 随后刷新页面，接下来见证奇迹，你会惊奇的发现你处于了登陆状态。 3. 如果你输入以下代码在URL当中 javascript:c=document.cookie;p=c.substrc.lastIndexOf'='+1.split/%../;a lert"Login: " + p0 + "\nPass: " + p1;void0;...
ParsBlogger (blog.asp wr) - Remote SQL Injection Vulnerability
No description provided by source. -------------------------------------------------------------------------------------------------------------------- Script : ParsBlogger Version : ! Link : http://www.parsblogger.com Dork : Powered by ParsBlogger Author : BorN To K!LL TeaM : Security Geeks...
Joomla Component GameQ <= 4.0 - Remote SQL injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component GameQ Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr POC :...
Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...
PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability
No description provided by source. !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your...
CMS little (index.php term) 0.0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
real estate web site 1.0 (sql/xss) Multiple Vulnerabilities
No description provided by source. --==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ Real Estate Web Site 1.0 SQL/XSS Multiple Remote Vulnerabilities +==-- --==+====================================================================================+==...
Oceandir <= 2.9 (show_vote.php id) Remote SQL Injection Vulnerability
No description provided by source. / @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit :...
PHP-Nuke 'friend.php' Module Remote SQL Injection
No description provided by source. Exploit Title: PHP-Nuke 'friend.php' Module Remote SQL Injection Date: 05.05.2010 Author: CMD Contact : [email protected] Version: all version =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code :...
Invision Power Board <= 2.3.5 - Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind waraxe // Estoni...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...
eWebquiz 8 - (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ وما أوتيتم من العلم الا قليلا -------------------------------صدق الله العظيم------------------------------- Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor:...
GLPI 0.71.3 - Multiple Remote SQL Injection VUlnerabilities
No description provided by source. + Application : GLPI v 0.71.3 + App'z URI : http://glpi-project.org + Bug : Multiple Remote SQL Injections + Author : Zigma + Home : http://NullArea.Net Let's have a look on the Security System GLPI uses : --- \inc\includes.php --- // Security system if isset$PO...
Magician Blog <= 1.0 (ids) Remote SQL Injection Vulnerability
No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...
PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...
BtiTracker <= 1.4.1 (become admin) Remote SQL Injection Vulnerability
No description provided by source. BtiTracker =v1.4.1 Remote SQL Injection Exploit Discovered by: m@ge|ozz - [email protected] Vulnerabitity: Remote Sql Injection / Problem: Any user can be Administrator Website Vendor: http://www.btiteam.org Vulnerable Code accountchange.php: if isset$GETstyle...
PunBB Automatic Image Upload <= 1.3.5 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowStats = USERGROUP;' is not commented in uploadimgconfig.php FIND LINE: 75...
vAuthenticate 2.8 - Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6605/info A vulnerability has been discovered in vAuthenticate. It has been reported that various PHP scripts used by vAuthenticate are prone to SQL injection attacks. This issue may be exploited by an unauthorized attack...
T.G.S. CMS <= 0.1.7 (logout.php) Remote SQL Injection Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
dB Masters Curium CMS <= 1.03 (c_id) Remote SQL Injection Vulnerability
No description provided by source. Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx :...