Alahliclub SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

http-axis2-dir-traversal NSE Script

Exploits a directory traversal vulnerability in Apache Axis2 version 1.4.1 by sending a specially crafted request to the parameter xsd BID 40343. By default it will try to retrieve the configuration file of the Axis2 service '/conf/axis2.xml' using the path '/axis2/services/' to return the userna...

phpcms v2.4 SQL injection exploit

No description provided by source. 1.vbs ------------------------------------------------------------------- on error resume next Set objArgs = WScript.Arguments dim myhttp dim mypath dim fjhgx printr if objArgs.length = 0 then quitprint End if if objArgs0 = null then quitprint Else myhttp =...

JaManaGe enterprise built Station system v2. 0 injection vulnerability-vulnerability warning-the black bar safety net

By:Mr. DzY date:2011/06/11 aManaGe the enterprise built Station system with perfect enterprise website background management functions, can through the background simple operation to achieve a large amount of information updated. Finished Good system, products, news, talent, and customer service...

Web Application SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Joomla 1.6.0 SQL Injection

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection Exploit', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage the SQL...

Smsgwadapter Server Admin Credentials Revealed !

Smsgwadapter Server Admin Credentials Revealed ! A Indian hacker, hack into the one of the SMS Server Smsgwadapter at 122.165.52.84 IP address. According to the hacker, This is the most unsecured Server got owned by a simple password guessing. In screenshot you can see the desktop of same server...

Joomla 1.6.0 SQL Injection / PHP Execution

Requirements require 'msf/core' Class declaration class Metasploit3 'Joomla 1.6.0 // SQL Injection - PHP Execution', 'Description' = %q A vulnerability was discovered by Aung Khant that allows for exploitable SQL Injection attacks against a Joomla 1.6.0 install. This exploit attempts to leverage...

iwebshop0. 7. 7 injection 0day-vulnerability warning-the black bar safety net

Use method: 1, the first casual look at a product,and then access the 2, the use of cookies by the browser, you will find inside will be more similar to"iwebhisgoods2 2this number is your access to the product id=1 2 8 2 2 8 2 7 6 2"Project 3, the first in the"2 2"rear add a single quotes, so tha...

Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0_RC_2

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

JAF-CMS 4.0_RC_2 Cross Site Scripting

Exploit Title: Persistent Cross Site Scripting Vulnerability In JAF-CMS ver 4.0RC2 Google Dork: Site engine powered by JAF-CMS Date: 9 January 2011 Author: Akastep Software Link: http://jaf-cms.sourceforge.net/ Version: JAF-CMS ver 4.0RC2 may be vuln exist in older versions too Tested on: FreeBSD...

Skadate Multiple Persistent Cross Site Scripting Vulnerabilities (Undisclosed New Vulnerability)

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

Skadate Cross Site Scripting

Exploit Title: Skadate Persistent Cross Site Scripting Vulnerability Google Dork: Powered by SkaDate dating Date: 2 January 2011 Author: Akastep Software Link: http://www.skadate.com Version: SkaDate dating software Tested on: nginx/0.7.62 php version: PHP/5.2.14 ----- Exploit: Persistent Cross...

DGNews 2.1 - SQL Injection

DGNews 2.1 - SQL Injection Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

AJ Matrix DNA - SQL Injection

!/usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D | -Contact: br0lydotCodeatgmaildotcom...

phpvidz 0.9.5 Administrative Credentials Disclosure

Exploit for php platform in category web applications =================================================== phpvidz 0.9.5 Administrative Credentials Disclosure =================================================== Researcher: Michael Brooks Affecting: phpvidz 0.9.5 Vulnerability: Administrative...

web-magik CMS SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= web-magik CMS SQL Injection Vulnerability ========================================= Vendor : http://web-magik.com/ prices : Not Yet:P Discovered by : cyberlog Site : Sekuritionline.net Channel :...

Pre Classified Listings SQL Injection

In The Name Of GOD + Exploit Title: Pre Classified Listings PHP SQL Injection Vulnerability + Date: 2010-11-14 + Author : Cru3l.b0y + Software Link: http://www.preproject.com/pclphp.asp + Price : 48.00$ + Contact : [email protected] + Website : WwW.PenTesters.IR + Greeting: Behzad, Ahmad,...

Joomla com_ijoomla_rss Persistent Xss Vulnerability

Exploit for php platform in category web applications ==================================================== Joomla comijoomlarss Persistent Xss Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...