Joomla Jsjobs Blind SQL Injection

Found by : Cyb3r-1sT C0ntact : cyb3r-1st at hotmail.com ======================================================= +++++++++++++++++++ Script information+++++++++++++++++ ======================================================= Script :: Joomla Jsjobs component...

RaksoCT Multiple SQL Injection Vulnerabilities

Exploit for asp platform in category web applications Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection Web : http://raksoct.com/ Found By : p0pc0rn 25/02/2011 Blind SQL ---------- 1 - Parameter gallerydetails.asp?aid=Blind SQL POC --- http://site.com//gallerydetails.asp?aid=12' an...

RaksoCT - Multiple SQL Injections

RaksoCT - Multiple SQL Injections Title : RaksoCT Web Design Vulnerable to Multiples SQL Injection Web : http://raksoct.com/ Found By : p0pc0rn 25/02/2011 Blind SQL ---------- 1 - Parameter gallerydetails.asp?aid=Blind SQL POC --- http://site.com//gallerydetails.asp?aid=12' and '1'='1 TRUE...

glFusion CMS Blind SQL Injection

= == === ====== == == == ==== === ==== ==== ==== === ==== === ==== glFusion CMS Blind SQL injection Vulnerability = == === ====== == == == ==== === ==== ==== ==== === ==== === ==== Author:H3X Cradit:Sepehr Security Team Reference: Product:glFusion CMS google Dork:"Powered by glFusion CMS"...

PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/perl 0-Day PHP-Nuke / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / /...

Greeklog CMS Blind SQL Injection

Title: Greeklog CMS Blind Sql Injection Vulnerability Dork:"Powered By Greeklog" Vulnerable Page : users.php?mode=Blind Sqli Author: H3X Credit: Sepehr Security Team Site :WWW.Sepehr-Team.Org Date:2011/2/22...

JAKCMS <= v2.01 RC1 Blind SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these...

JAKCMS 2.01 - Code Execution

JAKCMS 2.01 - Code Execution !/usr/bin/python JAKCMS query$sql; if $jakdb-affectedrows 0 $row = $result-fetchassoc; $SESSION'JAKLoggedIn' = true; Additionally, functionality in the backend, allows an administrative user to add a "phphook" where...

Independent Escort CMS - Blind SQL Injection

Exploit Title: Independent Escort CMS Blind SQL Injection Vunerability Google Dork: "Powered by Independent Escort CMS" Platform: php Date: 09.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/escort-design/index.php Price: 199 £ per month Tested on: Windows 7 Mail:...

Lingxia I.C.E CMS Blind SQL Injection

!/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme - net-ninja.net --------------------------- | +...

Lingxia I.C.E CMS - Blind SQL Injection

Lingxia I.C.E CMS - Blind SQL Injection !/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme -...

Escort Agency CMS Blind SQL Injection Vunerability

Exploit for php platform in category web applications Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability Google Dork: "Powered by Escort agency CMS - Escort agency webdesign" Platform: php, webapp Date: 10.02.2011 Author: NoNameMT Software Link:...

Escort Agency CMS - Blind SQL Injection

Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability Google Dork: "Powered by Escort agency CMS - Escort agency webdesign" Platform: php, webapp Date: 10.02.2011 Author: NoNameMT Software Link: http://www.escortwebsitedesign.co.uk/escort-agency-cms/index.php Price: 299 £ per month...

Escort Agency CMS - Blind SQL Injection

Escort Agency CMS - Blind SQL Injection Exploit Title: Escort Agency CMS Blind SQL Injection Vunerability Google Dork: "Powered by Escort agency CMS - Escort agency webdesign" Platform: php, webapp Date: 10.02.2011 Author: NoNameMT Software Link:...

PHP Classified ads software (cid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == -Author: BorN To K!LL - h4ck3r -Contact: email protected == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample:...

PHP Classified ads software - cid Blind SQL Injection

PHP Classified ads software - cid Blind SQL Injection == -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xampl...

PHP Classified Ads Software Blind SQL Injection

== -Author: BorN To K!LL - h4ck3r -Contact: [email protected] == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample: path/browsecats.php?cid=2 and substringversion,1,1=...

HP LoadRunner Unspecified Arbitrary Remote Code Execution

The version of HP LoadRunner installed on the remote host reportedly blindly trusts user-supplied data as an allocation size and uses to copy data from a request packet into a statically allocated heap buffer. A remote attacker who is able to contact TCP ports 5001 or 5002 on the remote host can...

PHP Coupon Script v. 6.0 (bus) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == |Script: PHP Coupon Script |Version: 6.0 |Dork: "PHP Coupon Script v. 6.0" |Link: http://www.couponscript.com == |Author: BorN To K!LL - h4ck3r |Contact: email protected == |3xploit: /index.php?page=viewbus&bus=Blind-Injection |3xample:...

PHP Coupon Script 6.0 Blind SQL Injection

== |Script: PHP Coupon Script |Version: 6.0 |Dork: "PHP Coupon Script v. 6.0" |Link: http://www.couponscript.com == |Author: BorN To K!LL - h4ck3r |Contact: [email protected] == |3xploit: /index.php?page=viewbus&bus=Blind-Injection |3xample: /index.php?page=viewbus&bus=1 and substringversion,1,1=...