Advanced Links Management (ALM) 1.52 - SQL Injection

Advanced Links Management ALM 1.52 - SQL Injection ALM - Advanced Links Management remote SQL injection exploit Script download : http://www.easy-script.com/scripts-dl/almv152.zip Founder: His0k4 ALGERIAN HACKER Greetz : All friends & muslims HaCkErS... Contact: His0k4.hlmatgmail.com P.O.C :...

[ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

BatmanPorTaL - 'uyeadmin.asp?id' SQL Injection

source: https://www.securityfocus.com/bid/29057/info BatmanPorTaL is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or...

XOOPS Recette 2.2 - 'detail.php' SQL Injection

source: https://www.securityfocus.com/bid/28859/info XOOPS Recette is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

BosClassifieds 3.0 (index.php cat) SQL Injection Vulnerability

No description provided by source. !R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, Not Sure :...

bosclassifieds-sql.txt

!R4Q!4N H4CK3R BosClassifieds 3.0 Remote Sql injection Exploit By:SoSo H HIraqi-Cracker Script website:http://www.bosdev.com Dork:"Powered by BosClassifieds Classified Ads System" Affected Versoions: BosClassifieds 3.0 Other Versions Maybe Affected, Not Sure : Expl0it:...

Ksemail (index.php language) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discoverd by dun \ dunatstrcpy.eu Ksemail Local File Include Vulnerability Script site: http://www.ksemail.com/,...

mybbcp-sql.txt

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

No description provided by source. MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Contact ICQ: 120946783 Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by&...

724CMS <= 4.01 Enterprise (index.php ID) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== 724CMS = 4.01 Enterprise index.php ID SQL Injection Vulnerability ==================================================================== 724CMS = 4.01 Enterprise - SQL...

Blog PixelMotion (index.php categorie) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Blog PixelMotion index.php categorie SQL Injection Vulnerability ================================================================== Blog Pixel Motion Sql Injection...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== CoBaLT 0.1 Multiple Remote SQL Injection Vulnerabilities ======================================================== ---------------------------------------- CoBaLT v1.0 Remote SQL...

Cobalt 0.1 - Multiple SQL Injections

---------------------------------------- CoBaLT v1.0 Remote SQL Ä°njection Vulnerabiltiy Discovered : U238 Mail : [email protected] WebPage : http://ugur238.org The End Script: http://www.aspindir.com/indir.asp?ID=5414 Script Alternativ :...

Wordpress Plugin Download (dl_id) SQL Injection Vulnerability

No description provided by source. Wordpress Plugin Download file Remote SQL Injection Vulnerability Author: BL4CK Mail: [email protected] Dork: inurl:"wp-download.php?dlid=" Example: http://localhost/path/path/path/wp-download.php?dlid=SQL SQL:...

digidomain-xss.txt

Hello i'm re-posting this message from the actual message which was on Tue-29 May 2007 becuase my old message got live example , anyway : Vulnerable : DigiDomain Version: 2.2 web : http://www.digiappz.com XSS : 1- http://site.com/lookup/lookupresult.asp?domain=XSS&tld=.com 2-...

easyclanpage-sql.txt

.-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. Easy-Clanpage v2.2 gallery Remote SQL Injection Vulnerability .-=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-. + Author: n3w7u + Mail: [email protected] + Source:...

PHP-Nuke Yellow_Pages Module - &#039;cid&#039; SQL Injection

source: https://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

eazyportal-sql.txt

!/usr/bin/perl Vendor url: http://www.eazyportal.com/ by Iron - http://www.randombase.com exploit goes through $COOKIE use LWP::UserAgent; use MIME::Base64; print " EazyPortal ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve...

SLAED CMS 'index.php'本地文件包含漏洞

BUGTRAQ ID: 27426 CNCAN ID:CNCAN-2008012406 SLAED CMS是一款基于PHP的WEB应用程序。 SLAED CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是由于'index.php'脚本对用户提交的'newlang'参数处理缺少充分过滤，提交本地系统文件作为包含对象，可导致以WEB权限查看系统文件内容。 SLAED CMS 2.5 Lite 厂商解决方案 目前没有详细解决方案提供： http://www.slaed.net/...