PixelPost 1.7 - Blind SQL Injection

!/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc3 print "-------------------------------------------------------------------------\r\n"; print " PixelPost 1.7 Blind SQL Injection...

FaScript FaPersianHack 1.0 - SQL Injection

FaScript FaPersianHack 1.0 - SQL Injection FaScript FaPersianHack v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://fascript.com/fapersianhack.zip Injection Adress : http://Sitename/ph/show.php?id= Help : In This Script Admin Username and Password Save in...

FaScript FaName v1 (page.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ FaScript FaName v1 page.php Remote SQL Injection Vulnerability ================================================================ FaScript FaName v1 Remote Sql Injection BY...

FaScript FaName 1.0 - SQL Injection

FaScript FaName v1 Remote Sql Injection BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.hotscripts.com/Detailed/66472.html Injection Adress : http://Sitename/faname/page.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file...

Directory traversal

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

CVE-2007-6662

Directory traversal vulnerability in file.php in CuteNews 2.6 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, as demonstrated by reading the admin username and password hash in data/users.db.php...

CVE-2007-6662

CVE-2007-6662 affects CuteNews 2.6, via a directory traversal vulnerability in file.php that allows reading arbitrary files by supplying .. in the file parameter. Exploitation demonstrated by accessing data/users.db.php to reveal admin username and password hash. Root cause is improper sanitizati...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...

ZenPhoto 1.1.3 - rss.php?albumnr SQL Injection

ZenPhoto 1.1.3 - rss.php?albumnr SQL Injection !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code rss.php: $albumnr = $GETalbumnr; if $albumnr != "" $sql = "SELECT FROM "...

zenphoto-sql.txt

!/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code rss.php: $albumnr = $GETalbumnr; if $albumnr != "" $sql = "SELECT FROM ". prefix"images" ." WHERE albumid = $albumnr AND show = 1...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Zenphoto 1.1.3 rss.php albumnr Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit...

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

!/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code rss.php: $albumnr = $GETalbumnr; if $albumnr != "" $sql = "SELECT FROM ". prefix"images" ." WHERE albumid = $albumnr AND show = 1...

Softbiz Ad Management plus Script ver 1 Remote SQL Injection Vuln

No description provided by source. Softbiz Ad Management plus Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/ads.php?package=SQL C0de SQL C0de :...

Softbiz Banner Exchange Network Script 1.0 - SQL Injection

Softbiz Banner Exchange Network Script 1.0 - SQL Injection Softbiz Banner Exchange Network Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/campaignstats.php?id= SQL C0de :...

Softbiz Banner Exchange Network Script 1.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Softbiz Banner Exchange Network Script 1.0 SQL Injection Vulnerability ====================================================================== Softbiz Banner Exchange...

Softbiz Link Directory Script - SQL Injection

Links Directory Script SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ DORK: "Powered by SoftbizScripts" "OUR SPONSORS" Injection Adress : http://server.com/searchresult.php?sbcatid= SQL C0de For Find admin Username :...

Softbiz Banner Exchange Network Script 1.0 - SQL Injection

Softbiz Banner Exchange Network Script ver 1 SQL INJECTION BY IRCRASH AUTHOR : IRCRASH Dr.Crash Script Download : http://www.softbizscripts.com/ Injection Adress : http://sitename/campaignstats.php?id= SQL C0de :...

openld122-sql.txt

--==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username an...

OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero...

aigaion-sql.txt

--==+================================================================================+==-- --==+ Aigaion = 1.3.3 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody "CypherXero" Rester PAYLOAD: Admin username a...