mypicgallery-admin.txt

!/usr/bin/perl use strict; use LWP::UserAgent; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit --+-\n"; print "-+-- Discovered && Coded By: t0pP8uZz --+-\n"; print "-+-- Discovered On: 16 MAY 2008 / h4ck-y0u, milw0rm --+-\n"; print "-+-- MyPicGallery 1.0 Arbitrary Add-Admin Exploit...

phpagtc-admin.txt

!/usr/bin/perl Note: adduser.php is accessable to a guest/any-user, but if you access through a browser you cant add admin, theres a hidden POST buried in the script, which contains the userlevel. Note: alot of sites run this script and they remove the "powered by" dork. Also you can get access t...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Advanced Image Hosting AIH 2.1 Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Advanced Image Host Script Powered by...

Links Directory 1.1 (cat_id) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...

Software Zone Remote SQL Injection Vulnlerabilities

No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

Gaming Directory 1.0 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Gaming Directory 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 5 April 2008...

Links Directory 1.1 - cat_id SQL Injection

Links Directory 1.1 - catid SQL Injection --==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By...

Links Directory 1.1 (cat_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Links Directory 1.1 catid Remote SQL Injection Vulnerability ===============================================================...

Links Directory 1.1 - 'cat_id' SQL Injection

--==+================================================================================+==-- --==+ Links Directory 1.1 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 6 April...

Affiliate Directory - cat_id SQL Injection

Affiliate Directory - catid SQL Injection --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8u...

Vastal I-Tech Software Zone - cat_id SQL Injection

Vastal I-Tech Software Zone - catid SQL Injection --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR:...

Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...

FaScript FaPhoto 1.0 - 'show.php' SQL Injection

AUTHOR : IRCRASH Dr.Crash Script Download : http://en.fascript.com/en.faphoto.zip Injection Adress : http://Sitename/faname/show.php?id= Help : In This Script Admin Username and Password Save in ./admin/pconfig.php You can open this file with loadfile Function in mysql and see admin Username and...

eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit ========================================================== Author: GiReX Date: 27/03/2008 - 1/04/2008 Added exploit for...

CVE-2008-1529

ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...

CVE-2008-1529

ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods...

PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability

No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PORAR WEBBOARD SQL Injection Vulnerability &n...

PORAR WEBBOARD (question.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ PORAR WEBBOARD question.asp Remote SQL Injection Vulnerability ================================================================ CoRPITX Turkey www.Hayalet-hack.com...

PunBB 1.2.16 - Blind Password Recovery

PunBB 1.2.16 - Blind Password Recovery ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created printf"Admin : %s\nDate : %s\n--\n", ADMIN, DATE; $h = curlinit; curlsetopt$h,...

PunBB <= 1.2.16 Blind Password Recovery Exploit

Exploit for unknown platform in category web applications =============================================== PunBB ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created...