287 matches found
Oxygen2PHP <= 1.1.3 (post.php) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl 0-Day Oxygen2PHP = 1.1.3 post.php Remote Blind SQL Injection Exploit Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew use strict; use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; use IO::Socket; my...
Yii Framework 1.1.8 Search SQL Injection Vulnerability
No description provided by source. Exploit Title: Yii Framework - Search SQL Injection Vulnerability Google Dork: No Dork Date: 20/11/2012 Exploit Author: Junookyo Vendor Homepage: http://www.yiiframework.com/ Software Link: http://www.yiiframework.com/download/ Version: 1.1.8 maybe another versi...
VideoScript 3.0 <= 4.0.1.50 - Official Shell Injection Exploit
No description provided by source. ?php =========================================== = x VideoScript 3.0 = 4.0.1.50 Official Shell Injection Exploit = = x by G4N0K = =========================================== errorreportingEALL; $G4N0K...
TCExam <= 4.0.011 (SessionUserLang) Shell Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------- TCExam = 4.0.011 $COOKIESessionUserLang shell injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...
phptroubleticket 2.0 - (id) SQL Injection Vulnerability
No description provided by source...
AnotherPHPBook (APB) 1.3.0 (Auth Bypass) - SQL Injection Vulnerability
No description provided by source. APBook 1.3.0 Login Bypass SQL Injection Vulnerability AUTHOR: n3w7u Download: www.clanscripte.net/main.php?content=download&do=dl&dlid=81 Dorks: inurl:apbook/index.php or AnotherPHPBook APB v.1.3.0 © 2001 by Stephan Baumeister zap Exploit:...
Trixbox 2.2.4 - PhonecDirectory.php SQL Injection
No description provided by source...
GREEZLE - Global Real Estate Agent Site Auth SQL Injection
No description provided by source...
Online Grades & Attendance 3.2.6 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Joomla Component com_joomportfolio Blind Injection Vulnerability
No description provided by source...
Brewthology 0.1 - SQL Injection Exploit
No description provided by source. Brewthology 0.1 SQL Injection Exploit By cr4wl3r http://bastardlabs.info Script: http://sourceforge.net/projects/brewthology/files/brewthology/v0.1%20public%20beta/ Demo: http://bastardlabs.info/demo/brewthology.png Tested: Win 7 Bugs found in beerxml.php if...
Green Desktiny - Customer Support Helpdesk 2.3.1 - SQL Injection Vulnerability
No description provided by source. Green Desktiny - Customer Support Helpdesk SQL injection vulnerability - id Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : Desember 25, 2009 Software Information + Vendor : http://www.greendesktiny.com/ + Download : - +...
Sharetronix 3.3 - Multiple Vulnerabilities
Exploit for php platform in category web applications Product: Sharetronix Vendor: Blogtronix, LLC Vulnerable Versions: 3.3 and probably prior Tested Version: 3.3 Advisory Publication: May 7, 2014 without technical details Vendor Notification: May 7, 2014 Vendor Patch: May 27, 2014 Public...
kkpw 2.2 /ajax_indus.php SQL注入漏洞
No description provided by source...
Open Web Analytics Password Reset Page owa_email_address Parameter SQL Injection
SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php. Vulnerability Type: SQL Injection For the exploit source co...
Maccms V8 注入两枚
简要描述： 过滤不严。无需单引号。同一文件。 详细说明： 在inc/user/alipay/alipayapi.php中 $outtradeno = $POST'WIDouttradeno';//可控 //商户网站订单系统中唯一订单号，必填 //订单名称 $subject = $POST'WIDsubject'; //必填 //付款金额 $price = $POST'WIDprice'; //必填 //商品数量 $quantity = "1"; //必填，建议默认为1，不改变值，把一次交易看成是一次下订单而非购买一件商品 //物流费用 $logisticsfee = "0.00";...
KPPW 2.2 /control/ajax/ajax_shop.php SQL注入漏洞
No description provided by source...
phpcms 2 0 0 7 onunload. inc. php page to an update-type implant is attached using the EXP-bug warning-the black bar safety net
Download a set of phpcms 2 0 0 7 analysis, in the module\movie\onunload. inc. php found a update type of injection. query"UPDATE ". TABLEMOVIESERVER." SET num = num-1 WHERE serverid = $serverid AND num 0 "; ? $serverid is not any filtering and also not enclosed in single quotation marks, so ignor...
ecshop最新版本SQL注入+存储XSS=任意管理员登录
简要描述： 一个功能点的SQL注入和存储XSS，内含多种技巧，我觉得我就是个艺术家～～ 详细说明： 刚下的ecshop V2.7.3版本～ 1.漏洞存在于站外广告统计功能对应管理后台的报表统计-站外投放JS，即/affiche.php页面，将from参数网站来源referer存储到了数据库表ecsadsense，而在后台的“站外投放JS”读取出来未过滤又进入了sql语句，导致二次注入。 /affiche.php 119行 $sql = "INSERT INTO " . $ecs-table'adsense' . "fromad, referer, clicks VALUES '-1', ...
WEBalbum 2.0 SQL Injection Vulnerability
Attacker can inject some malicious code http://127.0.0.1/webalbum/photo.php?id=SQL ======================== Demos : http://www.shutterpoint.co.uk/webalbum/photo.php?id=2869' www.escuelacardiel.com/galeria/photo.php?id=64' http://inco.nu/webalbum/photo.php?id=646'...