CVE-2008-3669

The CVE-2008-3669 entry concerns ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews). Affected component: comments.php. Root cause: SQL injection via the ItemID parameter. Impact: remote attacker could execute arbitrary SQL commands, enabling data access/manipul...

Joomla! Component EZ Store Remote - Blind SQL Injection

!/usr/bin/perl Note:Sometimes you have to change the regexp to viewcategory/catid,".$cid." use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Joomla Component EZ Store Blind SQL Injection Exploit \n"; print " Author:His0k4 ALGERIAN HaCkeR \n"; print " \n"; print "...

ZeeReviews (comments.php ItemID) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability ZeeReviews comments.php ItemID http://www.zeescripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

ZeeReviews - SQL Injection

ZeeReviews - SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability ZeeReviews comments.php ItemID http://www.zeescripts.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

ZeeReviews (comments.php ItemID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== ZeeReviews comments.php ItemID Remote SQL Injection Vulnerability =================================================================== Viva IslaM Viva IslaM Remote SQL...

Joomla Component com_content 1.0.0 (ItemID) SQL Injection Vuln

No description provided by source. ------------------------------------------------------------------------------------------- Joomla Component comcontent SQL Injection Vulnerabity ------------------------------------------------------------------------------------------- Author : unknownstyler...

Joomla Component com_content 1.0.0 (ItemID) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================== Joomla Component comcontent 1.0.0 ItemID SQL Injection Vuln ==============================================================...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

Exploit for unknown platform in category web applications ============================================================= Joomla Simple Shop Galore Component 3.x catid SQL Injection =============================================================...

joomlasimple-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component simpleshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comsimpleshop Dork : inurl:comsimpleshop "catid" POC :...

Joomla Component EasyBook 1.1 (gbid) SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Joomla Component EasyBook 1.1 gbid SQL Injection Exploit ========================================================== !/usr/bin/perl use IO::Socket; use strict; INFO Example: Host:...

sunshop-blindsql.txt

!/usr/bin/perl -w use LWP::UserAgent; scripts : SunShop Version 3.5.1 Remote Blind Sql Injection scripts site : http://www.turnkeywebtools.com/sunshop/ Discovered By : irvian site : http://irvian.cn email : [email protected] print "\r\n+-----------------------------------------+\r\n"; print...

Joomla! Component paxxgallery 0.2 - 'gid' Blind SQL Injection

!/usr/bin/perl use strict; use LWP::Simple; print "-+-- Joomla Component PaxxGallery Blind SQL Injection Exploit gid --+-\n"; print "-+-- "more than 1 row" --+-\n"; print "-+-- --+-\n"; print "-+-- Author: ZAMUT --+-\n"; print "-+-- Vuln: gid= --+-\n"; print "-+-- Dork: option=compaxxgallery...

Joomla Component Alberghi <= 2.1.3 (id) SQL Injection Vulnerability

No description provided by source. Mambo Component comalberghi SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA陌L : [email protected] TODAY MY B陌RTDAY SOO I WROTE 5 BUGS ALL FOR HACKERS 5 EXPLO陌TS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE DONT FORGET...

mamboaccombo-sql.txt

Mambo Component comaccombo SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] TODAY MY BİRTDAY SOO I WROTE 5 BUGS ALL FOR HACKERS 5 EXPLOİTS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE DONT FORGET MY PRESENT HACKERS GOOD LUCKY 100.0...

mamboalberghi-sql.txt

Mambo Component comalberghi SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] TODAY MY BİRTDAY SOO I WROTE 5 BUGS ALL FOR HACKERS 5 EXPLOİTS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE DONT FORGET MY PRESENT HACKERS GOOD LUCKY...

Joomla Component Acajoom (com_acajoom) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component Acajoom comacajoom SQL Injection Vulnerability ================================================================== Joomla Component comacajoom SQL Injection...

Joomla!/Mambo 'com_ewriting' 'Itemid'SQL注入漏洞

BUGTRAQ ID: 28179 CNCAN ID:CNCAN-2008031107 Joomla!/Mambo 'comewriting'是一款基于PHP的WEB应用程序。 Joomla!/Mambo 'comewriting'不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'itemid'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Meclazcke eWriting 1.2.1 目前没有详细解决方案提供：...

Joomla Component xfaq 1.2 (aid) Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomxfaq AUTHOR : S@BUN HOME : http://www.hackturkiye.com http://www.milw0rm.com/author/1334 MA陌L : [email protected] [email protected] DORK 1 : allinurl: aid "comxfaq" DORK 2 : allinurl: "comxfaq" EXPLOIT :...

Joomla Component NeoGallery 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Joomla Component NeoGallery 1.1 SQL Injection Vulnerability =========================================================== joomla SQL Injectioncomneogallery DORK 1 :...