9398 matches found
ipswitch whatsup gold 15.02 - Stored XSS - blind sqli - rce
No description provided by source. / Exploit Title: Ipswitch WhatsUp Gold 15.02 Stored XSS - Blind SQLi - RCE Date: Jul 22 2012 Author: muts Version: Ipswitch WhatsUp Gold 15.02 Vendor URL: http://www.ipswitch.com/ An attacker can modify their snmpd.conf file with malicious JavaScript as follows:...
Creative SplashWorks-SplashSite (page.php) Blind SQL Injection Vulnerability
No description provided by source. .:. Email : [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : Creative SplashWorks-SplashSite .:. Language : php .:. Bug Type : Blind Sql Injection .:. Dork : Website Powered By Creative SplashWorks - SplashSite === Exploit ===...
Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.: UltraStats is a very...
HASHE! Solutions Multiple SQL Injection Vulnerabilities
No description provided by source. HASHE! Multiple Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : HASHE .:. Bug Type : Sql InjectionMysql...
Lingxia I.C.E CMS Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme - net-ninja.net...
XOOPS Module resmanager <= 1.21 - Blind SQL Injection Exploit
No description provided by source. html head titleXOOPS Module resmanager = 1.21 editday.php BLIND SQL Injection Exploit/title script type=text/javascript //'=============================================================================================== //'Script Name: XOOPS Module resmanager =...
Joomla Component n-forms 1.01 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print \n; print Mambot Component n-forms Blind SQL Injection Exploit \n; print Author:The Moorish :D \n; print Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n; print...
OpenConf <= 4.11 (author/edit.php) Remote Blind SQL Injection Exploit
No description provided by source. ?php / --------------------------------------------------------------------- OpenConf = 4.11 author/edit.php Remote Blind SQL Injection Exploit --------------------------------------------------------------------- author...............: Egidio Romano aka EgiX...
phpshop 0.8.1 - Multiple Vulnerabilities
No description provided by source. Vendor: http://www.phpshop.org/ Discovered By: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it SQL INJECTION http://server/phpshop-0.8.1/?page=admin/functionlist&moduleid=111111' union select...
Danneo CMS <= 0.5.1 - Remote Blind SQL Injection Exploit
No description provided by source. ?php Danneo CMS = 0.5.1 Remote Blind SQL Injection Exploit Software site: http://www.danneo.com/ By InATeam http://inattack.ru/ Requires Referers statistics option turned ON! echo ------------------------------------------------------------\n; echo Danneo CMS =...
PHP Classifieds 7.5 - Blind SQL Injection Vulnerability
No description provided by source. Dear Sir / Madam The ItSecTeam has discovered a new bug in PHP Classifieds Lastest Version and will be glad to report and public it . More information about this bug is listed below :...
Joomla Component com_tophotelmodule 1.0 - Blind SQL Injection Vuln
No description provided by source...
LuxCal 3.2.2 - Multiple Vulnerabilities (CSRF/Blind SQL Injection)
No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: LuxCal v3.2.2 CSRF/Blind SQL Injection Vulnerabilities + Date: 09-03-2014 + Category: WebApp + Tested on: KaliLinux/Windows 7 Pro + CWE: CWE-352/CWE-89 + Vendor: http://www.luxsoft.eu/ + Friendly Sites:...
PsychoStats 3.2.2b (awards.php, id param) - Blind SQL Injection
No description provided by source. Exploit Title : PsychoStats awards.php blind SQL Injection ============== Date: 27/03/2013 00:50 ===== Author: Mohamed from ALG ====== Vendor or Software Link:http://psychostats.us/ ======================= Version: 3.2.2b ======== Category: webapps =========...
D-Link DIR615h OS Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...
Allomani Movies & Clips 2.7.0 - Remote Blind SQL Injection Exploit
No description provided by source. ?php inisetmaxexecutiontime,0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani movies & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qaban...
CubeCart <= 3.0.11 (oid) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- CubeCart = 3.0.11 oid blind SQL injection / admin credentials disclosure exploit by rgod [email protected] site:...
radbids gold 4.0 - Multiple Vulnerabilities
No description provided by source. -----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
Scientific Image DataBase <= 0.41 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: Scientific Image DataBase This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...
Linux kernel 2.0.30/2.0.35/2.0.36/2.0.37 - Blind TCP Spoofing Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/580/info Certain Linux kernels in the 2.0.3x range are susceptible to blind TCP spoofing attacks due to the way that the kernel handles invalid ack sequence numbers, and the way it assigns IDs to outgoing IP datagrams. Fo...