Openedit 5.1294 - Remote Code Execution

!/usr/bin/python Openedit = v5.1294 Remote Code Execution Exploit http://net-ninja.net/blog/?p=553 watch http://www.zeitgeistmovie.com/ Explanation: Vuln 1: Admin hash disclosure Vuln 2: Login with the hash Vuln 3: Unprotected file upload mrme@pluto openedit$ sudo python ./openown.py -p...

LightNEasy CMS 3.2.1 Blind SQL Injection

Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127 Version: 3.2.1 Special Thanks to: Dominik...

LightNEasy CMS 3.2.1 - Blind SQL Injection

LightNEasy CMS 3.2.1 - Blind SQL Injection Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127...

LightNEasy CMS 3.2.1 - Blind SQL Injection

Exploit Title: LightNEasy Cms 3.2.1 Blind SQL Injection Vulnerability Date: 20.09.2010 Author: Stephan Sattler // Solidmedia.de Software Website: http://www.lightneasy.org/ Software Link: http://www.lightneasy.org/addons/downloads/send.php?dlid=127 Version: 3.2.1 Special Thanks to: Dominik...

dynpage 1.0 - Multiple Vulnerabilities

dynpage 1.0 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-7-dynpage-multiple-remote-vulnerabilities/ ''' - Title : DynPage Multiple Remote Vulnerabilities. -...

URA 3.0 - cat SQL Injection

URA 3.0 - cat SQL Injection --------------------------------------------------- URA 3.0 cat remote SQL injection Vulnerability --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam + Vulnerability : SQL injection...

URA 3.0 - 'cat' SQL Injection

--------------------------------------------------- URA 3.0 cat remote SQL injection Vulnerability --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam + Vulnerability : SQL injection ---------info...

vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln

No description provided by source. --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza = 2.x vbplaza.php Remote Blind SQL Injection Vulnerability +==--...

vBulletin vbBux/vbPlaza Blind SQL Injection

--==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin...

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection

vBulletin vbBuxvbPlaza 2.x - vbplaza.php Blind SQL Injection --==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit...

vBulletin vbBux/vbPlaza 2.x - 'vbplaza.php' Blind SQL Injection

--==+======================================================================================================================+==-- --==+ vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin...

vBulletin vbBux/vbPlaza <= 2.x (vbplaza.php) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications ===================================================================== vBulletin vbBux/vbPlaza : 48 = 0 120 = x NOTE: You'll need to be logged into the forum to exploit vbplaza.php. Increment the limit to get the next admin . 0day.today...

Dana Portal - Remote Change Admin Password

Dana Portal - Remote Change Admin Password !/usr/bin/python Abysssec Inc Public Exploit Code Title : Dana Portal Remote Change Admin Password Exploit Affected Version : ASP Version Vulnerable File : albumdetail.asp Vendor Site : www.dana.ir note : no point to keep it private anymore . This exploi...

glFusion &lt;= 1.1.2 COM_applyFilter()/cookies Blind SQL Injection Exploit

No description provided by source. ?php / glFusion = 1.1.2 COMapplyFilter/cookies remote blind sql injection exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.glfusion.org/ google dork: "Page created in" "seconds by glFusion" +RSS Found...

Joomla com_phocadocumentation (id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== Joomla comphocadocumentation id Remote SQL Injection Exploit =============================================================== !/usr/bin/perl -w Joomla comphocadocumentation Sql...

Joomla Component 5starhotels (id) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Joomla Component 5starhotels id SQL Injection Exploit ======================================================= !/usr/bin/perl -w Joomla com5starhotels Sql injection Author : EcHoLL...

Minigal b13 (index.php list) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Minigal b13 index.php list Remote File Disclosure Exploit =========================================================== ?php settimelimit0; function findpass$data $pass =...

XOOPS Module GesGaleri (kategorino) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ XOOPS Module GesGaleri kategorino Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Xoops GesGaleri Sql injectio...

phpnukereview2-sql.txt

!/usr/bin/perl -w PHP-NUKE module Reviews2 id SQL injetion vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. ! ModuleName: Reviews2 ! ScriptName: PHP-NUKE ! GoogleDork: inurl:"modules.php?name=Reviews2" system"color FF0000";...

e107 Plugin BLOG Engine 2.2 - uid SQL Injection

e107 Plugin BLOG Engine 2.2 - uid SQL Injection !/usr/bin/perl e107 Plugin BLOG Engine v2.2 SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all...