WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

PunBB Extension Vote For Us <= 1.0.1 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PunBB Extension Vote For Us newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WordPress Plugin Related Sites 2.1 Blind SQL Injection Vulnerability ==================================================================== WordPress Plugin Related Sites 2...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 - Blind SQL Injection WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click =...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

PunBB Affiliates Mod <= 1.1 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== PunBB Affiliates Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection ...

WordPress Related Sites Plugin 2.1 - Blind SQL Injection Vulnerability

A critical blind SQL vulnerability has been discovered in the WordPress Plugin Related Sites plugin. User input is not being sanitized in BTERWwebajax.php file line 27, therefore the attacker can inject SQL via POST. Solution Update plugin...

osTicket 1.6 RC4 - Admin Login Blind SQL Injection

nGenuity Information Services - Security Advisory Advisory ID: NGENUITY-2009-007 osTicket Admin Login Blind SQL Injection Application: osTicket v1.6 RC4 Vendor: osTicket Vendor website: http://www.osticket.com Author: Adam Baldwin [email protected] I. BACKGROUND "osTicket is a widely-us...

PunBB VoteForUs.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

Oxygen2PHP 1.1.3 post.php Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./post.php?action=newthread&fid='+OR+1!=SELECT...

Oxygen2PHP 1.1.3 Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

Joomla! Component com_php - id Blind SQL Injection

Joomla! Component comphp - id Blind SQL Injection ------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s +...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...

MD-Pro 1.083.x Blind SQL Injection

!Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID http://www.site.com/MDPropath/modules.php?name=Surveys&op=results&pollID=SQL or...

MD-Pro 1.083.x - Survey Module 'pollID' Blind SQL Injection

!Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID http://www.site.com/MDPropath/modules.php?name=Surveys&op=results&pollID=SQL or...

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection !Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID...

AlumniServer 1.0.1 - resetpwemail Blind SQL Injection

AlumniServer 1.0.1 - resetpwemail Blind SQL Injection !/usr/bin/python || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ VIVA SPAIN!... GANAREMOS EL MUNDIAL!...o.O PROUD TO BE SPANISH!...

AlumniServer 1.0.1 (resetpwemail) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= AlumniServer 1.0.1 resetpwemail Blind SQL Injection Exploit ============================================================= !/usr/bin/python...