Online Grades 3.2.4 SQL Injection

0x01 Informations: Script : Online Grades 3.2.4 Download : http://www.onlinegrades.org Vulnerability : Auth Bypass - Php Info Disclosure Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: /parents/login.php $username = $POST'uname'; $pword = $POST'pass'; $mysqlquer...

Online Grades 3.2.4 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Online Grades 3.2.4 Auth Bypass SQL Injection Vulnerability ============================================================= 0x01 Informations: Script : Online Grades 3.2.4 Downloa...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

Exploit for unknown platform in category web applications ========================================================== Openfiler 2.3 Auth Bypass Remote Password Change Exploit ========================================================== Exploit code PoC for OpenFiler 2.3 current by just a nonroot use...

4Site CMS 2.6 - Multiple SQL Injections

4Site CMS 2.6 - Multiple SQL Injections WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

WholeHogSoftware Password Protect (Auth Bypass) SQL Injection Vuln

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Password Protect Site :http://wholehogsoftware.com Price :$20.00 Detay :http://www.wholehogsoftware.com/index.php/page/passwordprotectenhanced .... Admin Path...

WholeHogSoftware Ware Support (Auth Bypass) SQL Injection Vuln

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Ware Support Site :http://wholehogsoftware.com Price :$20.00 Detay :http://wholehogsoftware.com/index.php/page/waresupport .... Admin Path :http://c4team.org / Ware...

WholeHogSoftware Ware Support (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== WholeHogSoftware Ware Support Auth Bypass SQL Injection Vuln ============================================================== Script :Ware Support Site :http://wholehogsoftware.c...

WholeHogSoftware Password Protect (Auth Bypass) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================== WholeHogSoftware Password Protect Auth Bypass SQL Injection Vuln ================================================================== Script :Password Protect Site...

WinFTP 2.3.0 (LIST) Remote Buffer Overflow Exploit (post-auth)

No description provided by source. !/usr/bin/perl WinFTP 2.3.0 post-auth remote exploit. www.wftpserver.com root@halcyon:/Exploits/WinFTP perl winftp-remote.pl Usage: winftp-remote.pl host username password target Target: 1 - Win2k Target: 2 - WinXP sp2/3 DoS only root@halcyon:/Exploits/WinFTP pe...

Authentication flaw

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

SalesCart (Auth Bypass) SQL Injection Vulnerability

No description provided by source. ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :SalesCart Product Management Plugin Site :http://www.salescart.com Demo :http://www.salescart.com/scorderdemo/online/default.asp Details...

SkaLinks 1.5 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== SkaLinks 1.5 Auth Bypass SQL Injection Vulnerability ====================================================== Product : SkaLinks Version : 1.5 Dork : Powered by SkaLinks Site:...

SkaLinks 1.5 SQL Injection

Product : SkaLinks Version : 1.5 Dork : Powered by SkaLinks Site: http://www.skalinks.com/ Founded by: Dimi4 Date : 29.01.09 Greetz: antichat SQL-injection, Auth Bypass + URL: http://target.com/skalinks15/admin/ + Admin name : 1' OR 1=1/ Bug Function: function IsAdmin $tablename =...

NetArtMedia Car Portal 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== NetArtMedia Car Portal 1.0 Auth Bypass SQL Injection Vulnerability ====================================================================...

NetArtMedia Car Portal 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = XORON 2009C = = Car Portal v1.0 Bypass Remote SQL Injection Vuln. = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- = = Script:...

Chipmunk Blog (Auth Bypass) Add Admin Exploit

No description provided by source. 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php...

Chipmunk Blog (Auth Bypass) Add Admin Exploit

Exploit for unknown platform in category web applications ============================================= Chipmunk Blog Auth Bypass Add Admin Exploit ============================================= 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip...

ClickAuction SQL Injection

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠ Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠ Vendor: ClickAuction ☠ ☠ Software: ClickAuction ☠ ☠ author: я3d D3v!L ☠ ☠ Date: 26.1.2009 ☠ ☠ Home: www.ahacker.biz ☠ ☠ contact: N/A...

ClickAuction (Auth Bypass) Remote SQL Injection Vulnerability

No description provided by source. ☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ ☠Tybe:Auth Bypass Remote SQL Injection Vulnerability ☠Vendor:...

WinFTP Server 2.3.0 - 'LIST' (Authenticated) Remote Buffer Overflow

!/usr/bin/perl WinFTP 2.3.0 post-auth remote exploit. www.wftpserver.com root@halcyon:/Exploits/WinFTP perl winftp-remote.pl Usage: winftp-remote.pl Target: 1 - Win2k Target: 2 - WinXP sp2/3 DoS only root@halcyon:/Exploits/WinFTP perl winftp-remote.pl 10.0.0.5 user1 pass1 1 = Connected. = Sending...