3835 matches found
ASPSitem <= 2.0 - Remote (SQL Injection / DB Disclosure) Vulnerabilities
No description provided by source. ASPSitem = 2.0 Multiple Vulnerabilities. Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on ASPSitem = 2.0. Original advisory can be found at: http://www.nukedx.com/?viewdoc=39 SQL injection - GET -...
fipsCMS light <= 2.1 (r) Remote SQL Injection Vulnerability
No description provided by source. Exploit Code: victim/path/home/index.asp?w=pages&r=9999999 union select all 0,username,null,0x1 from admin victim/path/home/index.asp?w=pages&r=9999999 union select all 0,password,null,0x1 from admin http://localhost:2222/lab/cms/admin...
asp talk (sql/css) Multiple Vulnerabilities
No description provided by source. 000000 00000 0000 0000 000 00 000000 0000000 0000 000000 00000 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 00 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 00000 0 0 0 0 0 0 0 0 00000 0000 0 0 0 0 00000 0 0 0 0 0 0 0 0 0 0 000 0 0 0 ...
WebPortal CMS <= 0.6.0 (index.php m) Remote SQL Injection Exploit
No description provided by source...
Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...
ViArt Shop <= 3.5 (category_id) Remote SQL Injection Vulnerability
No description provided by source. GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in...
WebStudio CMS - (pageid) Remote Blind SQL Injection Vulnerability (mil mixup)
No description provided by source. submitted: 09/01/2008 10:01 AM ----------------------------------------------------------------------------------- Scr!pt : WebStudio CMS V3rs!0n : ! S!t3 : http://www.bdigital.biz/?pageid=214 Dork : Powered by WebStudio Auth0r : BorN To K!LL...
phpShop <= 0.8.1 - Remote SQL injection / Filter Bypass Vulnerabilities
No description provided by source. Vendor : PHPShop Webiste : http://www.phpshop.org Version : v0.8.1 Author: the redc0ders / theredc0dersatgmaildotcom Condition: magicquotegpc = off , in php.ini setting Details : ========== Vulnerable Code in index.php near lines 98 - 128 code // basic SQL injec...
Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability
No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...
Php Blue Dragon CMS 3.0.0 - Remote SQL Injection Exploit
No description provided by source. ? // Exploit Name: Php Blue Dragon CMS 3.0.0 Remote SQL Injection Exploit //Script Homepage: http://phpbluedragon.pl/ // Autor: Kacper [email protected] // Autor Homepage: devilteam.eu | kacper.bblog.pl //Pozdrawiam wszystkich ludzi z DEVIL TEAM, Zapraszam na...
proManager <= 0.73 (note.php) Remote SQL Injection Vulnerability
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - proManager = 0.73 Add Admin SQL Injection Vulnerabilities + + + - Script name: proManager v.0.73 - Script site: http://sourceforge.net/projects/promanager/ + + + - Find by: Kacper a.k.a Rahim + - Contact:...
TaskFreak! <= 0.6.1 - Remote SQL Injection Vulnerability
No description provided by source. | | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. TaskFreak! SQL Injection Product: TaskFreak!/Discovered in ==0.6.1 Vuln: Remote SQL Injection...
Joomla Component Kbase 1.0 - Remote SQL Injection Vulnerability
No description provided by source...
4Site CMS <= 2.6 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules Pages module:...
addalink <= 4 (category_id) Remote SQL Injection Vulnerability
No description provided by source...
Enigma Haber <= 4.3 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...
Click N Print Coupons <= 2006.01 - (key) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Click N' Print Coupons = V2005.01 key Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.websitedesignsforless.com $$ : $9.95 Message : Tum Musluman Aleminin Kurban Bayrami Mubarek Olsun .. .....
CMS little (index.php term) 0.0.1 - Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...
Active Membership 2 - (Auth Bypass) Remote SQL Injection Vulnerability
No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Membership v 2 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...