Gaming Directory 1.0 - cat_id SQL Injection

Gaming Directory 1.0 - catid SQL Injection --==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered...

PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl - PIGMy-SQL = 1.4.1 Blind SQL Injection Exploit - PIGMy-SQL is vulnerable because the mysql querys are insecure, therefor it allows an attack to execute sql querys, since the.. ..vulnerable page only returns a picture we have to use a blind sql...

Gaming Directory 1.0 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...

Software Index 1.1 - 'cid' SQL Injection

--==+================================================================================+==-- --==+ Software Index 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 6 April...

Gaming Directory 1.0 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

Affiliate Directory (cat_id) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ============================================================== Affiliate Directory catid Remote SQL Injection Vulnerbility ==============================================================...

PIGMy-SQL 1.4.1 - getdata.php Blind SQL Injection

PIGMy-SQL 1.4.1 - getdata.php Blind SQL Injection !/usr/bin/perl - PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take several minutes.\n"; my $result = blindattack$url, $pid; print "Exploited! Admin Details Are: ".$result;...

softwarezone-sql.txt

--==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

comdev-sql.txt

--==+================================================================================+==-- --==+ Comdev News Publisher SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

PIGMy-SQL 1.4.1 - 'getdata.php' Blind SQL Injection

!/usr/bin/perl - PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take several minutes.\n"; my $result = blindattack$url, $pid; print "Exploited! Admin Details Are: ".$result; exit; sub blindattack my $url = shift; my $pid =...

CVE-2008-1651

Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Smoothflash - cid SQL Injection

Smoothflash - cid SQL Injection Powered by Smoothflash SQL injection Powered by Newartonline AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : "Powered by Smoothflash" DORK 2 : allinurl:...

PEEL CMS Admin Hash Extraction and Remote Upload

!/usr/bin/php ?php /--------------------------------------------------------------- Exploit: PEEL CMS Admin Hash Extraction and Remote Upload Credits: Charles "real" F. charlesfolathotmail.fr URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL...

ASPapp Knowledge Base - 'CatId' SQL Injection (1)

....... ...... ..... .....CoRPITX ..... ..... ...... ....... -----------------Turkey-------------------------------------- --------- www.Hayalet-hack.com------------------------------- ----------www.xcorpitx-hack.com------------------------------ Iatek | ASPapp -links.asp CatId SQL Injection...

CreateLive CMS Version 4.0 0day-vulnerability warning-the black bar safety net

CreateLive CMS Version 4.0 0day.doc by:xiaok q:391232032.771044833 time: 2008-2-4 0 2:1 0 XP SP2 ie7 iis5. 1...... A tribute to D. S. T you gay, cause Hell-Phantom, the actuator on thin ice, causing the old D, The actuator Doom, causing the group to get help with the culture of the rogue...

Code injection

The Zyxel P-2602HW-D1A router with 3.40AJZ.1 firmware provides different responses to admin page requests depending on whether a user is logged in, which allows remote attackers to obtain current login status by requesting an arbitrary admin URI...

PORAR WebBoard - question.asp SQL Injection

PORAR WebBoard - question.asp SQL Injection CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk...

Unfixed XSS vulnerability at www.buzzle.com

Security researcher DerickTham, has submitted on 25/02/2008 a cross-site-scripting XSS vulnerability affecting www.buzzle.com, which at the time of submission ranked 10334 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2008. It is...

porarwebboard-sql.txt

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net email : [email protected] This SQL give Admin name and Admin password Bu sorgu direk admin ismi ve sisresini verecektir DorK : ''...

PunBB 1.2.16 - Blind Password Recovery

^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created printf"Admin : %s\nDate : %s\n--\n", ADMIN, DATE; $h = curlinit; curlsetopt$h, CURLOPTURL,...