PHP weby directory software 1.2 - Multiple Vulnerabilities

=========================================== Vulnerable Software: PHP Weby directory software version 1.2 Vendor: http://phpweby.com Download: htp://phpweby.com/down/phpwebydirectory.zip Vuln: Blind SQL injection && CSRF Dork: intext:Powered by PHP weby software...

myBB KingChat Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELE...

Viral Membership System Multiple Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

jaow 2.4.5 add_ons.php SQL注入漏洞

No description provided by source...

Feifei television systems PHP version v1. 9 injection exploit-vulnerability warning-the black bar safety net

Article author: honglousy Yesterday the whole hacking Forum next station on the program, found that people also really many. Simply write the exp. Boring as... ? php / Fly fly video management system SQL injection Feifei television systems PHP version v1. 9 injection exploit by:www.08sec.com fans...

Joomla! Component com_videogallery - Local File Inclusion SQL Injection

Joomla! Component comvideogallery - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/53237/info The Video Gallery component for Joomla! is prone to local file-include and SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attack...

ESHOP network operators treasure Mall 1.0 GetWebshell-vulnerability warning-the black bar safety net

A day Wake up late, get up found on the ground a flyer. See is an online shop. So want to see with what program, find out where to see the html comments,css comments, and file name. Find is ESHOP network operators treasure Mall. google under exploits, found eshop exploits, test the next, not. But...

Discuz X2.0 source-module-forum_misc.php sql注入漏洞

No description provided by source...

CreateVision CMS SQL Injection

!/usr/local/bin/perl Exploit Title: CreateVision CMS Database injection. Description: Virtually none of the variables are not filtered. Google Dork: inurl:artykulprint.php Date: 2012/02/24 Author : Zwierzchowski Oskar Software Link: http://www.createvision.pl/ Version: All Version Security Risk:...

Lebanese Yellow Pages website database Compromised

Lebanese Yellow Pages database Compromised Lebanese Yellow Pages website https://www.yellowpages.com.lb/ database compromised by Hacking Group known as Mad HackerZ Team. Hackers manage to hack database of site and leaked it on internet. Leaked database include the usernames, Password hashes and...

Pre Studio Business Cards Designer SQL Injection

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Exploit Title: Pre Studio Business Cards Designer SQL Injection Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Author: drzig Date: 20-10-2011 Software Link: http://www.preprojects.com/card.asp proof o...

Musiccut210p Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python print " Title Exploit: Musiccut210p Local Buffer Overflow" print " Auther: Angel Injection" print " Email: 1/9/2011" print " Home Page: http://www.1337day.com http://www.sec-krb.org" filename = exploit.m3u" junk = "\x41" 860...

phpcms2008 & phpcms2007 GBK版ask/search_ajax.php SQL注射漏洞

PHPCMS 是国内领先的网站管理系统，同时也是一个开源的PHP开发框架 漏洞文件：ask/searchajax.php code： ?php require './include/common.inc.php'; requireonce MODROOT.'include/ask.class.php'; $ask = new ask; header'Content-type: text/html; charset=utf-8'; ifstrtolowerCHARSET != 'utf-8' $q = iconvCHARSET, 'utf-8', $q; if$q $where = "...

EC_word enterprise management system injection exploit-vulnerability warning-the black bar safety net

The program uses maple General-purpose anti injection 1. 0 asp Edition, this anti-injection completely tasteless, the site program proshow. asp with cookies to injection, or variant of the injection, before injection can first determine what number of fields: ORdeR By xx Injected statement: ANd 1...

jakCMS 2.01 RC1 Blind SQL Injection

!/usr/bin/python jakCMS = v2.01 RC1 Blind SQL Injection Exploit Understanding: The parameters 'JAKCOOKIENAME' and 'JAKCOOKIEPASS' are parsed via cookies to the application and are unchecked for malicious characters. The contents of these variables are directly inserted into an SQL statement,...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...

OvBB V0.16a Forum Remote SQL Injection Exploit

Exploit for perl platform in category web applications ============================================== OvBB V0.16a Forum Remote SQL Injection Exploit ============================================== !/usr/bin/perl -w OvBB V0.16a Forum Remote SQL Injection Exploit Found & Coded: indoushka Date:...

ibPhotohost 1.1.2 - SQL Injection

Title: ibPhotohost 1.1.2 SQL Injection + Author: fred777 - fred777.5x.to + Link: http://mods.invisionize.com/index.php/f/7609 + Vuln: index.php?autocom=photohost&CODE=04&img=SQL Injection + Greetzz to: back2hack,free-hack,hackbase,c-c + Contact: [email protected] + -- Vuln Code -- $id...

BlueCMS getip()injection vulnerability-vulnerability warning-the black bar safety net

, Description,BlueCMS is a place to classified information portal dedicated CMS system. Procedures in using the getipfunction to get the Client ip when not strictly filter the data, resulting in sql injection vulnerability. Second, the analysis //comment.php $sql = "INSERT INTO ". table'comment'....

A-Blog 2.0 - '/sources/search.php' SQL Injection

!/usr/bin/python Exploit Title: A-Blog v2.0 sources/search.php SQL Injection Exploit Date : 05 September 2010 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/a-blog/ Version : 2.0 Tested on : EasyPHP 5.3.1.0 for...