Supernet CMS Blind SQL injection

Exploit for php platform in category web applications Exploit Title: Supernet CMS BlindSQLi Date: 22.03.2012 Google Dork/s: Greetz: Inj3ct0r 1337day Exploit DataBase 1337day.com allintext:"Vse pravice pridržane | © 2006 Supernet.si" site:.si allintext:"Vse pravice pridržane | © 2007 Supernet.si"...

Joomla! 2.5.0 2.5.1 - Blind SQL Injection

Joomla! 2.5.0 2.5.1 - Blind SQL Injection !/usr/bin/perl Thu Mar 15 22:55:32 CET 2012 A. Ramos www.securitybydefault.com Joomla \n"; print "\texamples:\n"; print "\t get admin password:\n"; print "\t\t$0 http://host/joomla/ 3 'database'\n"; print "\t\t$0 http://host/joomla/ 3 'select tablename fr...

Clic Page XSS and SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Clic Page XSS and SQL Injection Vulnerability Date: 11.03.2012 Author: OruçReis Vendor or Software Link: http://www.clicpremium.com/ Version: 4.0 Category:: webapps Google dork: inurl:"clic-page.php?id=1" Tested on: Linux Mint...

HTTP Blind SQL Injection Scanner

This module identifies the existence of Blind SQL injection issues in GET/POST Query parameters values. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Blind SQL Injection Scanner',...

Siemens and Canon's Databases exploited by Team INTRA

Siemens and Canon's Databases exploited by Team INTRA Recently a hacker known as "JoinSe7en" from Team INTRA claims to have hacked into subdomains of Canon and Siemens. Apparently, the hacker has found and exploited a Blind SQL Injection vulnerability in Canon's website and a Error based SQL...

LimeSurvey (PHPSurveyor 1.91+ stable) - Blind SQL Injection

Exploit Title: LimeSurvey Blind SQL injection Date: 20/02/2012 Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC ------------------------------------------------------------------------- TorTukiTu - Killing Tortoise ,-"""-. oo./ / \ /\ /// \...

Limesurvey (PHPSurveyor v.1.91+ stable) Blind SQL Injection

Exploit for php platform in category web applications Exploit Title: LimeSurvey Blind SQL injection Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC ------------------------------------------------------------------------- TorTukiTu - Killing...

LimeSurvey (PHPSurveyor 1.91+ stable) - Blind SQL Injection

LimeSurvey PHPSurveyor 1.91+ stable - Blind SQL Injection Exploit Title: LimeSurvey Blind SQL injection Date: 20/02/2012 Author: TorTukiTu - OpenSphere Version: 1.91+ build 11804 Tested on: php ckeprotectedCckeprotectedC -------------------------------------------------------------------------...

Joomla com_etree Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla cometree Blind SQL-inj Vuln Date: 20.02.2012 Author: Mach1ne Version: 1.5.+ Category:: remote, webapps Google dork: inurl:compersonal Tested in: web ============================== ================================= Multipl...

63 Vulnerabilities on United Nation Website Exposed Online !

63 Vulnerabilities on United Nation Website Exposed Online ! Latest Notification in The Hacker News Vault by a Hacker named "Xenu Casi" from r00tw0rm Team that There are 63 Blind SQL injection Vulnerabilities exist on United Nation's Website www.un.org. Blind SQL injection is identical to normal...

Achievo 1.4.3 Cross Site Scripting / SQL Injection

Title: ====== Achievo v1.4.3 - Multiple Web Vulnerabilities Date: ===== 2012-01-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=403 VL-ID: ===== 403 Introduction: ============= Achievo is a flexible web-based resource management tool for business environments. Achiev...

Achievo 1.4.3 - Multiple Web Vulnerabilities

Title: ====== Achievo v1.4.3 - Multiple Web Vulnerabilities Date: ===== 2012-01-30 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=403 VL-ID: ===== 403 Introduction: ============= Achievo is a flexible web-based resource management tool for business environments. Achiev...

Vastal I-Tech Agent Zone - search.php Blind SQL Injection

Vastal I-Tech Agent Zone - search.php Blind SQL Injection Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...

Ez Album Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album - Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit : http://server/album/index.php?action=view&id=BlindSQLi...

Ez Album Blind SQL Injection

Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com/album/demo.php Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Ez Album - Blind SQL Injection

Ez Album - Blind SQL Injection Title : Ez Album Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 31/01/2012 Risk : High Demo : http://www.scriptsez.com Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...

Vastal I-Tech Agent Zone - 'search.php' Blind SQL Injection

Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step http://server/real/search.php?pricefrom=1000000.00+and+1=1&priceto=10000000.00 The Secon...

phux Download Manager - Blind SQL Injection

phux Download Manager - Blind SQL Injection Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM...

phux Download Manager - Blind SQL Injection

Title : phux Download Manager Blind SQL Injection Vulnerability Author : Red Security TEAM Date : 30/01/2012 Risk : High Demo : http://demos.phux.org/downloadmanager/ Tested On : CentOS Contact : Info 4t RedSecurity d0t COM Home : http://RedSecurity.COM Exploit :...