Aigaion <= 1.3.3 (topic topic_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Aigaion = 1.3.3 topic topicid Remote SQL Injection Vulnerability ====================================================================...

PNPHPBB2 < 1.2i - 'viewforum.php' SQL Injection

/ i PNphpBB2 "viewforum.php" SQL Injection Blind Password Hash Fishing Exploit i Vulnerable versions: PNphpBB2 You need at least 2 posts in the forum. - Thanks to waraxe for exploit structure... I have saved much time : Tested - Postnuke 0.764 with PNphpBB2 1.2i and MySQL 5.0.42 Maybe with other...

TotalCalendar <= 2.402 (view_event.php) Remote SQL Injection Vulns

Exploit for unknown platform in category web applications ================================================================== TotalCalendar = 2.402 viewevent.php Remote SQL Injection Vulns ==================================================================...

TotalCalendar 2.402 - view_event.php SQL Injection

TotalCalendar 2.402 - viewevent.php SQL Injection --==+================================================================================+==-- --==+ TotalCalendar 2.402 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHO...

TotalCalendar 2.402 - 'view_event.php' SQL Injection

--==+================================================================================+==-- --==+ TotalCalendar 2.402 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

Various sites program's default database-vulnerability warning-the black bar safety net

Action Network: The default database /data/dvbbs7. mdb BACKUP DATABASE /databackup/dvbbs7. mdb Front: Username: admin Key code: admin888 Background: Username: admin Key code: admin888 --------------- bbsxp: The default database database/bbsxp. mdb ＿＿＿＿＿＿＿＿＿＿＿＿＿＿＿ LeadBBS The default database...

fuzzy-sql.txt

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...

Fuzzylime Forum 1.0 - low.php?topic SQL Injection

Fuzzylime Forum 1.0 - low.php?topic SQL Injection !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE...

Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Fuzzylime Forum 1.0 low.php topic Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL...

Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...

eqdkp-sql.txt

!/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS membercurrent, memberstatus, r.rankname,...

comicsense02-sql.txt

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

comicsense-sql.txt

Comicsense SQL Injection Advisory/Exploit by s0cratex [email protected] http://plexinium.net - ComicSense is a script using php / mySQL. It allows you to easily host an Online Comic or Image shack. You can download it from www.gayadesign.nl/comicsense/ - The bug is a common sql injection in...

Comicsense 0.2 (index.php epi) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable...

pnphpbb2-sql.txt

C:\usr\php\php.exe c:\php.php Content-type: text/html X-Powered-By: PHP/4.3.9 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Usage: php c:\php.php host path OPTIONS host: target server ip/hostname path: PNphpBB2 path Options: -pport: specify a port other than 80...

Comicsense 0.2 (index.php epi) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== Comicsense 0.2 index.php epi Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit...

Comicsense 0.2 - 'index.php?epi' SQL Injection (2)

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

EQdkp &lt;= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...

EQdkp 1.3.2 - listmembers.php SQL Injection

EQdkp 1.3.2 - listmembers.php SQL Injection !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...

EQdkp 1.3.2 - 'listmembers.php' SQL Injection

!/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS membercurrent, memberstatus, r.rankname,...