vBulletin Secure Downloads 2.0.0r - SQL Injection

vBulletin Mode Secure Downloads v2.0.0r SQL Injection Vulnerability Mod : http://www.1src.com/freeware/download.php?id=1880 Author : Cn4phux PoC : URL.com/fileinfo.php?id=SQL : 1797'+AND0+UNION+SELECT+1,1,1,1,1,'Cn4phux',0,0,0,1,0,1,0,0,0,0,0,USER,DATABASE,0,0,0,0,0,0,0+OR+'1'='0 //Cn4phux...

PEiD 0.92 - .PE File Universal Buffer Overflow

PEiD 0.92 - .PE File Universal Buffer Overflow !/usr/bin/perl PEiD = 0.92 Buffer Overflow Universal Exploit Exploit by SkD [email protected] ---------------------------------------------- An old vulnerability but no existing exploit for it, so here it is. Of course, I had to make it universal...

Tizag Countdown Creator 3 - Insecure Upload

Tizag Countdown Creator 3 - Insecure Upload remote file upload script: tizag-countdownVersion3 download from:http://www.tizag.com/downloads/tizag-countdownVersion3.zip www.site.com/path/index.php upload file.php shell= www.site.com/path/pics/file.php Author: ahmadbady my mail:...

Cold BBS (cforum.mdb) Remote Database Disclosure Vulnerability

No description provided by source. Database Disclosure Vulnerability script: Cold BBS download from:http://www.peachydandy.com/scripts/download.php?go=2&file=4&mirror=7 www.site.com/path/db/cforum.mdb Author: ahmadbady my mail: [email protected] milw0rm.com 2008-12-05...

PEiD 0.92 - '.PE' File Universal Buffer Overflow

!/usr/bin/perl PEiD = 0.92 Buffer Overflow Universal Exploit Exploit by SkD [email protected] ---------------------------------------------- An old vulnerability but no existing exploit for it, so here it is. Of course, I had to make it universal because of that.This exploit will work on all OS...

freekot-sql.txt

--------------------------------------------------------- Portal Name: FREEKOT Vendor : http://www.digiappz.com/freekot2.asp?id=6 Author : PouyaServer , [email protected] Vulnerability : Auth bypass SQL Injection Vulnerability --------------------------------------------------------- SQL:...

User Engine Lite ASP (users.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================== User Engine Lite ASP users.mdb Database Disclosure Vulnerability ==================================================================...

Ocean12 Mailing List Manager Gold - File Disclosure / SQL Injection / Cross-Site Scripting

--------------------------------------------------------- Portal Name: Ocean12 Mailing List Manager Gold Vendor : http://ocean12tech.com/products/o12mailgold Author : PouyaServer , [email protected] Vulnerability : DD,SQL,XSS --------------------------------------------------------- DD:...

activetest21-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:questions.asp QuizID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Test v 2.1 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

activewebmail4-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

comersuscart-xss.txt

--------------------------------------------------------- Portal Name: Comersus Cart Vendor : http://comersus.com Dork: Powered by Comersus ASP Shopping Cart Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS:...

Active Web Mail v 4 Blind SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe:emails.aspx TabOpenQuickTab1 Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: Active Web Mail v 4 author: я3d D3v!L Date:...

Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection

--------------------------------------------------------- Portal Name: Ocean12 FAQ Manager Pro Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Blind Sql Injection --------------------------------------------------------- Exploit : site.com/?Action=Cat&ID=40%20and%201=1 true...

Turnkey Arcade Script - SQL Injection (1)

----------------Mor0ccan Nightmares---------------- ------------------------------ Script: Turnkey Arcade Script- ------------------------------ ----------------------------------- Site: http://www.turnkeyarcade.com- -----------------------------------...

chipmunkboard-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Board Vendor : http://www.chipmunk-scripts.com/page.php?ID=8 Download : http://www.chipmunk-scripts.com/board/board.zip Vulnerable File : index.php Dork: Powered by c Chipmunk Board Author : PouyaServer ,...

chipmunkguestbook-sqlxss.txt

--------------------------------------------------------- Portal Name: Chipmunk Guestbook Vendor : http://www.chipmunk-scripts.com/page.php?ID=13 Download : http://www.chipmunk-scripts.com/guestbook/guestbooks.zip Vulnerable File's : index.php Dork: Powered by c Chipmunk Guestbook Author :...

pap-sql.txt

■ Post Affiliate Pro v.3 index.php md © AuToR: XaDoS Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.qualityunit.com/postaffiliatepro/ © Str0ke Joy Division Teo Babbeo Spud Loooo Z00ooo00oo0 / Lol ;-...

ParsBlogger - 'blog.asp' SQL Injection

-------------------------------------------------------------------------------------------------------------------- Script : ParsBlogger Version : ! Link : http://www.parsblogger.com Dork : "Powered by ParsBlogger" Author : BorN To K!LL TeaM : Security Geeks Sec-Geeks.com...

nitrotech-rfisql.txt

Name: Nitrotech 0.0.3a Multiple Remote Vulnerabilities Download: http://sourceforge.net/project/downloading.php?groupname=nitrotech&filename=nitrotech003a.zip&usemirror=garr Author: Osirys, thanks to x0r Contact: [email protected] Nitrotech cms is vulnerable to multiple vulnerabilities, like remote...

coms-xss.txt

--------------------------------------------------------- Portal Name: COMS Contents & Object Management System Vendor : http://Coms.ir Vulnerable File : dynamic.php Dork: Copyright C 2005-2007 by COMS Author : PouyaServer , [email protected] Vulnerability : XSS Cross site scripting...