8863 matches found
QuickTalk Forum 1.6 - Blind SQL Injection
QuickTalk Forum 1.6 - Blind SQL Injection QuickTalk Forum / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit qtfindsearchov.php - - Info...
Danneo CMS <= 0.5.1 Remote Blind SQL Injection Exploit
No description provided by source. ?php Danneo CMS = 0.5.1 Remote Blind SQL Injection Exploit Software site: http://www.danneo.com/ By InATeam http://inattack.ru/ Requires "Referers statistics" option turned ON! echo "------------------------------------------------------------\n"; echo "Danneo C...
Danneo CMS 0.5.1 - Blind SQL Injection
use specific prefix\n"; echo "-id= - use specific user id default 1\n"; echo "-c= - benchmark's loop count default 300000\n"; echo "-v - verbose mode\n\n"; echo "tip:\n"; echo "use bigger number of if server is slow\n\n"; echo "php $argv0 http://site.com/ -p=cms\n"; echo "php $argv0...
Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385)
COMPASS SECURITY ADVISORY http://www.csnc.ch/ Product: Urulu Vendor: USystems Subject: Blind SQL Injection Vulnerability Risk: High Author: Daniel Roethlisberger Date: 2008-02-25 CVE Name: CVE-2008-0385 Introduction ------------ An AJAX based Blind SQL Injection vulnerability exists in the Web 2....
Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: PunBB Blind Password Recovery Vulnerability Release Date: 2008/02/20 Last Modified: 2008/02/20 Author: Stefan Esser stefan.esseratsektioneins.de Application: PunBB = 1.2.16 Severity...
PunBB 1.2.16 - Blind Password Recovery
^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created printf"Admin : %s\nDate : %s\n--\n", ADMIN, DATE; $h = curlinit; curlsetopt$h, CURLOPTURL,...
PunBB 1.2.16 - Blind Password Recovery
PunBB 1.2.16 - Blind Password Recovery ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created printf"Admin : %s\nDate : %s\n--\n", ADMIN, DATE; $h = curlinit; curlsetopt$h,...
Woltlab Burning Board 3.0.x Remote Blind SQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; echo "WoltLab Burning Board 3.0.X Remote SQL-Injection Exploit by NBBN\n"; start1, 48; / You have to edit this script. / / Works succesfully at 3.0.1. If you enter in 3.0.3 PL1:...
PunBB <= 1.2.16 Blind Password Recovery Exploit
Exploit for unknown platform in category web applications =============================================== PunBB ^0-94-0-92-0-92/td/', $s, $m; if count$m define'DATE', mktime0, 0, 0, $m2, $m3, $m1; else define'DATE', time - 86400; //just in case, the forum or account just has been created...
[DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4
Digital Security Research Group DSecRG Advisory DSECRG-08-015 Application: Dokeos E-Learning System Versions Affected: 1.8.4 Vendor URL: http://dokeos.com Bugs: Multiple SQL Injections,Multiple Blind SQL Injections,Multiple XSS, etc. Exploits: YES Reported: 25.01.2008 Vendor response: 28.01.2008...
Joomla! Component mediaslide - 'albumnum' Blind SQL Injection
!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...
Joomla Component mediaslide (albumnum) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex =...
Joomla Component mediaslide (albumnum) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Joomla Component mediaslide albumnum Blind SQL Injection Exploit ================================================================== !/usr/bin/perl inphex joomla commediasli...
Joomla! Component mediaslide - albumnum Blind SQL Injection
Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...
Limbo CMS <= 1.0.4.2 Cuid cookie Blind SQL Injection Exploit
No description provided by source. !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...
Limbo CMS 1.0.4.2 - Cuid cookie Blind SQL Injection
Limbo CMS 1.0.4.2 - Cuid cookie Blind SQL Injection !/usr/bin/python ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / /...
A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
Hello BugTraq Recently I've been looking at the OpenBSD PRNG implementation for DNS transaction ID OpenBSD ported BIND 9 into their code tree, but rolled their own PRNG for the DNS transaction ID field. I discovered a serious weakness in OpenBSD's PRNG, which allows an attacker to predict the nex...
Mihalism Multi Host Download - 'Username' Blind SQL Injection
query"SELECT FROM ".SQLUSERSTABLE." WHERE username = '".$POST'username'."'"; Line 112: $DB-query"INSERT INTO ".SQLUSERSTABLE." VALUES'', '".$POST'username'."', '".md5$POST'userpass1'."', '', '".$SERVER'REMOTEADDR'."', '".$POST'useremail'."', '".$POST'private'."', '".time."', 'NORMAL',...
Mihalism Multi Host Download (Username) Blind SQL Injection Exploit
No description provided by source. ?php / Moubik Romanian Security Team - http://rstzone.org presents Mihalism Multi Host Download - Blind SQL Injection Attack Thanks to Vladii for telling me about the CMS. Thanks to Shocker for telling Vladii about the CMS. Shoutz to Kw3rln, Bankai, Slick,...
Mihalism Multi Host Download (Username) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Mihalism Multi Host Download Username Blind SQL Injection Exploit =================================================================== ?php / Mihalism Multi Host Download -...