Ajax Short URL Script - Authentication Bypass

Ajax Short URL Script - Authentication Bypass - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login...

SaphpLesson 4.0 - Authentication Bypass

SaphpLesson 4.0 - Authentication Bypass ---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script :...

SaphpLesson v4.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability ==========================================================...

SaphpLesson 4.0 SQL Injection

---------------------------------SaphpLesson v4.0 Auth Bypass SQL Injection Vulnerability--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : SaphpLesson version : 4.0 Language: PHP Site:...

AShop ru.1.Beta Database Config Disclosure

Application Name : AShop ru.1.Beta Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : Admin Login Password Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/AShop.rar.html - http://softsearch.ru/programs/30-132-ashop-ru-download.shtml EXPLOIT :...

APBook 1.3 - Admin Login Multiple SQL Injections

APBook 1.3 - Admin Login Multiple SQL Injections source: https://www.securityfocus.com/bid/43452/info APBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

APBook 1.3 - Admin Login Multiple SQL Injections

source: https://www.securityfocus.com/bid/43452/info APBook is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

MCshoutbox 1.1 SQL Injection / XSS / Shell Upload

MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc = off - Vulnerable code in...

Unfixed XSS vulnerability at www.njmrk.com

Security researcher Milisx, has submitted on 14/07/2009 a cross-site-scripting XSS vulnerability affecting www.njmrk.com, which at the time of submission ranked 5185747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

phpFanfiction SQL Injection Exploit

!/usr/bin/perl phpFanfiction Remote SQL injection Greetz www.MainHack.com - www.ServerIsDown.org - www.sux0r.net VOP Crew Vaksin13 OoNBoy Paman R3VANBASTARD Kecemplungkalen eminem Shiro zxvf Pizzyroot iwannine Jupe Crew makasih buat ngenet gratisnya wkwkwk use HTTP::Request; use LWP::UserAgent;...

osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== osTicket 1.6 RC4 Admin Login Blind SQL Injection Vulnerability ============================================================== nGenuity Information Services - Security Advisory...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

CVE-2009-2154

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

impleo music Collection 2.0 - SQL Injection / Cross-Site Scripting

Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in /admin/login.php...

Impleo Music Collection 2.0 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. + Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in...

Impleo Music Collection 2.0 XSS / SQL Injection

Impleo Music Collection 2.0 SQL/XSS Multiple Remote Vulnerabilities + Download: http://sappy.dk/impleo/download-impleo + Discovered By SirGod + www.mortal-team.org + SQL Injection Auth Bypass - Requirements : magicquotesgpc = off - Vulnerable code in /admin/login.php...

php version ewebeditor 3.8. vulnerability-vulnerability warning-the black bar safety net

php 版本 后台 是 调用 ../ewebeditor/admin/config.php,we went to look at the source code will know, here I talk about using the method: 1 First of course to find a landing back,默认 是 ../eWebEditor/admin/login.php,into the background after casually enter a user and password,of course,will prompt an error,...

DM FileManager 3.9.2 Insecure Cookie Handling Vulnerability

No description provided by source. DM FileManager 3.9.2 Insecure Cookie Handling Vuln Founder: ThE g0bL!N ------ Home: http:/www.4ckx.com/dz/ ---- Vendor:http://dutchmonkey.com Special Thx: Snakespc Note: Algerie 3-1 Egypt Exploit: ------ javascript:document.cookie="USER=user name ;path=/";...

Virtue Shopping Mall SQL Injection

CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php http://www.virtuenetz.com/mall/ ID :1 Usuario : adm...

Virtue Shopping Mall - cid SQL Injection

Virtue Shopping Mall - cid SQL Injection CMS : Virtue Shopping Mall WEB : http://www.virtuenetz.com/mall/ Archivo : products.php Variable Tipo : GET valor : cid Tipo : SQL Injection URL : http://www.site.com/products.php?cid=SQLI Exploit : undersec@Undersec:/Escritorio$ php exploit.php...