kervinet forum 1.1 - Multiple Vulnerabilities

kervinet forum 1.1 - Multiple Vulnerabilities dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin';...

kervinet forum 1.1 - Multiple Vulnerabilities

dork: "Copyright KerviNet" eLwauxc 20.06.2009 Blind SQLinj /index.php ------------------------------------------------------------------------------------------------- if$COOKIE'userenter'=="auto" $enterlogin=$COOKIE'enterlogin'; $enterparol=$COOKIE'enterparol'; $mysql-query"SELECT name, pass,...

PunBB Affiliates Mod <= 1.1 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== PunBB Affiliates Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection ...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 - Blind SQL Injection WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click =...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

TSEP <= 0.942.02 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ TSEP = 0.942.02 Multiple Remote Vulnerabilities ================================================ TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: "powered by TSEP - The Searc...

tsep 0.942.02 - Multiple Vulnerabilities

TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt'...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

tsep 0.942.02 - Multiple Vulnerabilities

tsep 0.942.02 - Multiple Vulnerabilities TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt','$display',...

WordPress Related Sites Plugin 2.1 - Blind SQL Injection Vulnerability

A critical blind SQL vulnerability has been discovered in the WordPress Plugin Related Sites plugin. User input is not being sanitized in BTERWwebajax.php file line 27, therefore the attacker can inject SQL via POST. Solution Update plugin...

PunBB Extension Vote For Us <= 1.0.1 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PunBB Extension Vote For Us newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub...

TSEP 0.942.02 SQL Injection / XSS / Disclosure

TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt...

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability ==================================================================== WordPress Plugin Related Sites 2...

TSEP &lt;= 0.942.02 Multiple Remote Vulnerabilities

No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: "powered by TSEP - The Search Engine Project" ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email :...

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...