3263 matches found
XPOZE Pro <= 3.05 (reed) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== XPOZE Pro ; print "Enter Valid Username register on target site first: "; chompmy $user = ; print "Enter Valid Password register on target site first: "; chompmy $pass = ; print "Attack...
Joomla Component Cinema 1.0 Remote SQL Injection Vulnerability
No description provided by source. Joomla Component comcinema SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comcinema" EXPLOiT 1 :...
USN-586-1: mailman vulnerability
Multiple cross-site scripting flaws were discovered in mailman. A malicious list administrator could exploit this to execute arbitrary JavaScript, potentially stealing user credentials...
phpBB Mod FileBase 2.0 - id SQL Injection
phpBB Mod FileBase 2.0 - id SQL Injection --==+================================================================================+==-- --==+ phpBB MOD FileBase SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8u...
b1st-sql.txt
Ecommerce Websites from b1st.com SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com MAİL : [email protected] DORK 1 : "Ecommerce Websites from b1st.com" DORK 2 : allinurl: EXPLOİT WORKİNG ON HTML SİTES LOOK Combo Deals UNDER PAGE YOU WİLL SEE ALL USERS USERNAME AND...
WordPress Plugin Simple Forum 1.10 < 1.11 - SQL Injection
Simple Forum Version 1.10-1.11 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] Simple Forum - Version 1.10 Simple Forum - Version 1.10 - 2.1.3 Simple Forum - Version 1.11 EXPLAİN= sametimes password and username in error massege fo...
aflog-sqlxss.txt
Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like this:...
boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability
No description provided by source. ...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hacke...
boast-sql.txt
...:::::boastMachine =3.1 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend in the...
aflog 1.01 - Cross-Site Scripting SQL Injection
aflog 1.01 - Cross-Site Scripting SQL Injection Name: aflog 1.01 and possibly earlier Webiste: http://aflog.org/ Vulnerability type: SQL Injection comments.php and XSS Author: shinmai, 2008-01-22 Description: SQL INJECTION: SQL injection is possible in comments.php for the GET variable 'id', like...
agares221-sql.txt
!/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...
Agares phpAutoVideo 2.21 - articlecat SQL Injection (2)
Agares phpAutoVideo 2.21 - articlecat SQL Injection 2 !/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...
Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...
PostgreSQL Multiple Vulnerabilities
Binary data 4333.prm...
MeGaCheatZ 1.1 - Multiple SQL Injections
MeGaCheatZ 1.1 - Multiple SQL Injections --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5
waraxe-2007-SA060 - Sensitive info disclosure in CuteNews = 1.4.5 ===================================================================== Author: Janek Vind "waraxe" Date: 24. December 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-60.html Vulnerable software description: Cute new...
Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== Ip Reg 0.3 Multiple Remote SQL Injection Vulnerabilities ======================================================== --------------------------------------------------------------- / | ...
nicLOR CMS - 'sezione_news.php' SQL Injection
Name : nicLOR-CMS SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Download : http://www.niclor.net/prodotti/16-04-06-niclorcms.zip Date : 21/12/2007 SQL Injection in sezionenews.php So we can exploit the $intSezioneID and execute an sql injection. PoC:...
Meridian Prolog Manager uses weak authentication to store and transmit user credentials
Overview Meridian Systems Prolog Manager does not use strong encryption and returns a list of all user credentials when authenticating clients. These behaviors could allow an attacker to obtain user credentials and decrypt passwords. Description Meridian Systems Prolog Manager is a set of...
Flat PHP Board <= 1.2 Multiple Vulnerabilities
--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...