Sphider <= 1.3.4 shell upload vulnerability

Exploit for unknown platform in category web applications =========================================== Sphider Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site...

CD Rentals SQL Injection

/ ! CD Rentals Script SQL injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date & Time : Thu Feb 10, 2010 5:55 PM ! Rock On : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

Vacation Rental Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

Vacation Rental Script - SQL Injection

Vacation Rental Script - SQL Injection ::::::::::::::::::::::::: Exploit Title : vacation Rental Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

CMS Boys SQL Injection

/ Name : CMS BOYS id Multiple SQL Injection WebSite : http://www.cmsboys.com/ Demo : http://www.cmsboys.com/democms/ Author : Hamza 'MizoZ' N. Email : [email protected] Greetz : Zuka , PR0f.SELLIM , Dyle , Achille Dark3r , geeksec.com / 1st : File : newsdetail.php , GET : id...

PHPBB 3.0 0day

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure\n"; echo "by Hackerz5 [email protected]\n"; echo "site: http://hackerz5.com\n"; echo "dork, version specific: "Powered by phpBB 2002,...

PHPBB 3.0 SQL 0day-vulnerability warning-the black bar safety net

Code not tested as to use the moderator privileges of users can perform !/ usr/bin/php-q-d shortopentag=on 1 2 6 $result.=" ."; else $resu...

CMScontrol 7.x File Upload

Exploit for unknown platform in category web applications ========================== CMScontrol 7.x File Upload ========================== CMScontrol 7.x File Upload Author : Cyber945 Bug Type : File Upload Infection : Adminin bilgileri alinabilir. Dork : inurl:"index.php?idmenu="...

Zeeways Technology (product_desc.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Zeeways Technology productdesc.php SQL Injection Vulnerability ================================================================= Zeeways Technology productdesc.php SQL...

YP Portal MS-Pro Surumu 1.0 Database Disclosure

======================================================================================== | Title : YP Portal MS-Pro Surumu 1.0 DB Download Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | DAte : 16/12/200...

D-Tendencia Bt 2008 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== D-Tendencia Bt 2008 SQL Injection Vulnerability =============================================== / Software Information + Vendor : http://www.autoabc.hu/ + script : D-Tendencia Bt 2008 +...

Mail Manager Pro XSRF (Change Admin Password)

Exploit for unknown platform in category web applications ============================================= Mail Manager Pro XSRF Change Admin Password ============================================= ----------------------------------------------------------------------------------------------- Title:...

Dow Group (new.php) SQL Injection

No description provided by source. ===================================== | Dow Group admin by pass new.php ===================================== Author:ProF.Code Email :[email protected] ===================================== dorkgoogle : intext:"powered and designed by Dow Group" demo username:...

Allomani Movies Clips 2.7.0 - Blind SQL Injection

Allomani Movies Clips 2.7.0 - Blind SQL Injection ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani movies & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.co...

ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...

ZenPhoto 1.2.5 - Completely Blind SQL Injection

/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...

CVE-2009-2272

CVE-2009-2272 concerns the Huawei D100 where the administrator’s account name and password are stored in cleartext in a cookie. The underlying issue enables context-dependent attackers to obtain sensitive information by reading a cookie file or sniffing HTTP headers, with other vectors possible. ...

Virtue Book Store - 'cid' SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

Virtue Book Store SQL Injection

CMS : Online Book Store WEB : http://www.virtuenetz.com/book/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : Ejemplo : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/book/ ID :1 Usuari...

ZeusCart 2.3 SQL Injection

!usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip | -Bug: Sql Injection | -Found: by...