EasyWay CMS - mid SQL Injection

EasyWay CMS - mid SQL Injection php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+...

PassWiki 0.9.16 RC3 - 'site_id' Local File Inclusion

dork: "powered by PassWiki" example: http://w3.funsrv.com/konjo/passwiki/passwiki.php?siteid=../../../../../../../../../../../../../etc/passwd%00 http://inajob.no-ip.org/passwiki/passwiki.php?siteid=../../../../../../../../../../../../../etc/passwd%00 author:[email protected] http://rstzone.org...

AirvaeCommerce 3.0 (pid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== AirvaeCommerce 3.0 pid Remote SQL Injection Vulnerability ===========================================================...

PHPFreeForum 1.0 rc2 - '/part/menu.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29337/info phpFreeForum is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user i...

tomcat manager example DoS

Multiple cross-site scripting XSS vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 el/functions.jsp, 2 el/implicit-objects.jsp, and 3 jspx/textRotate.jspx in examples/jsp2/, as demonstrated via...

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

cmswebman-sql.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/ Vuln:...

CMS WebManager-Pro Multiple Remote SQL Injection Vulnerabilities

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/...

Lulieblog 1.2 - Multiple Vulnerabilities

Lulieblog 1.2 - Multiple Vulnerabilities LulieBlog 1.2 Multiple Remote Vulnerabilities Admin Auth Bypass, Upload File, Blind SQL Injection Author: Cod3rZ Site: http://cod3rz.helloweb.eu Site: http://devilsnight.altervista.org Date: 06/05/2008 dd/mm/yyyy Admin Auth Bypass: Modify Articles: send a...

CMS WebManager-Pro - Multiple SQL Injections

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu CMS Webmanager-pro Remote SQL Injection Vulnerability Script site: http://webmanager-pro.com/ Vuln:...

calogic-sql.txt

/---------------------------------------------------------------\ \ / / CaLogic Calendars V1.2.2 Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : "CaLogic Calendars V1.2.2" POC :...

Advanced Links Management (ALM) 1.52 - SQL Injection

Advanced Links Management ALM 1.52 - SQL Injection ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C :...

[ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29057/info BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

XOOPS Recette 2.2 - 'detail.php' SQL Injection

source: https://www.securityfocus.com/bid/28859/info XOOPS Recette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

BosClassifieds 3.0 (index.php cat) SQL Injection Vulnerability

No description provided by source. !R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, Not Sure :...

bosclassifieds-sql.txt

!R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, Not Sure : Expl0it:...

Ksemail (index.php language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discoverd by dun \ dunatstrcpy.eu Ksemail Local File Include Vulnerability Script site: http://www.ksemail.com/,...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by&...

mybbcp-sql.txt

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...