Hipergate v4.0.12 Multiple Vulnerabilities

Exploit for jsp platform in category web applications ========================================== Hipergate v4.0.12 Multiple Vulnerabilities ========================================== Permanent XSS: Advisory Name: Permanent Cross-Site Scripting XSS in Hipergate 4.0.12 Vulnerability Class: Permanen...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...

Codice CMS 2 SQL Command Execution

--+++===========================================================+++-- --+++====== Codice CMS 2 Remote Command Execution Exploit ======+++-- --+++===========================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub banner print...

Bloginator v1a SQL Command Injection via Cookie Bypass Exploit

No description provided by source. Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotatautisticidotorg / osirysatautisticidotorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download =...

Bloginator 1a SQL Command Injection

Author = FireShot , Jacopo Vuga. Thx to = Osirys for develop the Exploitation Code with me Mail = fireshotautisticiorg / osirysautisticiorg Vulnerability = SQL Command Injection mq = off Software = Bloginator V1A Download = http://kamads.com/kamadsads/download.php?email=bloginator&ID=0 Greets to ...

Bloginator v1a SQL Command Injection via Cookie Bypass Exploit

Exploit for unknown platform in category web applications ============================================================== Bloginator v1a SQL Command Injection via Cookie Bypass Exploit ============================================================== Author = FireShot , Jacopo Vuga. Thx to = Osirys f...

CVE-2008-6414

SQL injection vulnerability in detail.php in AJ Auction Pro Platinum Skin 2 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the pass parameter...

Sql injection

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

CVE-2008-6270

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

CVE-2008-6270

SQL injection vulnerability in admin/index.php in Dragan Mitic Apoll 0.7 beta and 0.7.5 allows remote attackers to execute arbitrary SQL command via the user parameter...

Graugon Forum v1 (id) SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

FaScript FaUpload - SQL Injection

FaScript FaUpload - SQL Injection !!..:: ZAC003 ::..!! -+ Vive int Iranian WhiteHat Nomads Group +- ------------------------------------------------------------------------------------------- Reporter : ZAC003 From Aria-Security.Net Script Download :...

Liberum Help Desk 0.97.3 - SQL Injection / File Disclosure

Liberum Help Desk SQL/DD Multiple Remote Vulnerabilities author : Cold z3ro, www.hackteach.org Dork : "Liberum Help Desk, Copyright C 2001 Doug Luxem" ============== SQL Injection http://www.site.com/path/forgotpass.asp In uid insert SQL command's = SCMD == ' or '1=1 SCMD == ' or 'update tblusers...

Sql injection

SQL injection vulnerability in admin/index.php in Mole Group Rental Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

Gentoo Security Advisory GLSA 200506-02 (mailutils)

The remote host is missing updates announced in advisory GLSA 200506-02. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Vulnerabilities: LedgerSMB < 1.2.15

Multiple vulnerabilities: LedgerSMB Synopsis: Two vulnerabilities announced in LedgerSMB for versions prior to 1.2.15 Status: Corrected in version 1.2.15 and later vendor fix available. Impact: Resource exhaustion on server, arbitrary SQL command execution. Other software affected: SQL-Ledger, al...

DSA-1633-1 slash - multiple vulnerabilities

Bulletin has no description...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

TutorialCMS 1.02 (userName) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = 'SSV-7841' vul ID version = '1' author = 'hh' vulDate = '2008-01-12' createDate =...