jsite-sqllfi.txt

--==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==-- -=-=--=-=-=-=-=-=-=-=-=-=-=-=-= SQL Injection Exploit...

Joomla! Component QuickTime VR 0.1 - SQL Injection

!/usr/bin/perl -w Joomla Component QuickTime VR v 0.1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : Mr.Al3FrItE & Islamic Security Team & Mounita20 & CoNaN and all musulmans hackers ComponentName: QuickTime VR ScriptName: Joomla Dork :...

pivot-disclosure.txt

?php / Pivot 1.40.5 'Dreamwind' loadtemplate credentials disclosure exploit by Nine:Situations:Group::bookoo our site: http://retrogod.altervista.org/ software site: http://www.pivotlog.net/ Google dork: "by Pivot - 1.40.5" +'Dreadwind' -pivotlog.net vulnerability: search.php - lines 98-109: ... ...

galatolo-sql.txt

!/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims HaCkeRs :...

Mambo Component mambads <= 1.0 RC1 Beta SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl -w Mambo Component mambads 1.0 RC1 Beta & 1.0 RC1 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 from MoroCCo Greetz : Stack & CoNaN & HaCkeREgY & room-hacker & Hak3r-b0y & All friends & All muslims HaCkeRs :...

phpbook-sql.txt

Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All muslims...

RoomPHPlanning 1.5 - Arbitrary Add Admin

RoomPHPlanning v1.5 remote Arbitrary Add Admin Users Vulnerability + Script download :http://www.beaussier.com/roomphplanning/telecharge.php + Founded by : Stack + Greetz : All friends & muslims HaCkeRs... DESCRIPTION: RoomPHPlanning is vulnerable to add user whit go to link see down in colon Nom...

Multiple vulnerabilities in FreeStyleWiki including cross-site scripting

Overview FreeStyleWiki contains a cross-site scripting and a cross-site request forgery vulnerabilities. The cross-site scripting vulnerability could allow a remote attacker to create a web page containing a malicious script. The cross-site request forgery vulnerability could allow a remote...

Archangel Weblog 0.90.02 - 'post_id' SQL Injection

!/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All...

Archangel Weblog 0.90.02 - post_id SQL Injection

Archangel Weblog 0.90.02 - postid SQL Injection !/usr/bin/perl -w Portal : Archangel Weblog 0.90.02 Download : http://www.archangelmgt.com/ArchangelWeblogv09002.zip exploit aported password crypted mgharba :d:d:d:d Founded & Exploited by : Stack-Terrorist v40 Contact: Ev!L = see down Greetz :...

Advanced Image Hosting (AIH) 2.1 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= Advanced Image Hosting AIH 2.1 Remote SQL Injection Exploit ============================================================= !/usr/bin/perl -w Advanced Image Host Script Powered by...

CVE-2008-2018

The AssignUser function in template.class.php in PHPizabi 0.848b C1 HFP3 performs unsafe macro expansions on strings delimited by '' and '' characters, which allows remote authenticated users to obtain sensitive information via a comment containing a macro, as demonstrated by a "user.password"...

siteman2x-multi.txt

Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de - R3d.w0rm - Rasool Nasr IRCRASH BUGTRA...

Siteman 2.x - Code Execution Local File Inclusion Cross-Site Scripting

Siteman 2.x - Code Execution Local File Inclusion Cross-Site Scripting Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar...

Siteman 2.x (EXEC/LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Siteman 2.x EXEC/LFI/XSS Multiple Remote Vulnerabilities ========================================================== Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE...

Prediction Football 1.x - matchid SQL Injection

Prediction Football 1.x - matchid SQL Injection / Prediction Football v 1.x Remote SQL INJECTION Discovered by 0in from Dark-Coders Programming & Security Group. !!!!!! http://dark-coders.4rh.eu !!!!!! Contact: 0indotemailatgmaildotcom Greetz to all Dark-Coders Group Members: DieAngel, Sun8hclf,...

My Gaming Ladder <= 7.5 (ladderid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== My Gaming Ladder = 7.5 ladderid SQL Injection Vulnerability ==============================================================...

Software Zone Remote SQL Injection Vulnlerabilities

No description provided by source. --==+================================================================================+==-- --==+ Software Zone SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...

PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take sev...

Vastal I-Tech Software Zone (cat_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Vastal I-Tech Software Zone catid SQL Injection Vulnerability ================================================================...