FoosunCMS Sql Injection Vulnerability

API/APIResponse.asp 变量username未经过滤传值，带入sql执行，导致注入产生。 关键代码： If CheckPost Then Select Case Act Case “checkname” ‘触发注入 Checkname CheckPost函数原型在行73-96，username由此获取值，代码如下: XmlDoc.documentElement.selectSingleNode”username” Checkname函数在行233-254，代码如下： Sub Checkname Dim UserEmail Dim Temptr,i,Rs,Sql...

sebraccms-sql.txt

Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. This allows login access without prop...

Joomla Component Xe webtv (id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Joomla Component Xe webtv id Blind SQL Injection Exploit ========================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1...

mamboarticles-sql.txt

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...

Mambo Component Articles (artid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Mambo Component Articles artid Blind SQL Injection Exploit ============================================================ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long;...

Mambo Component Articles - 'artid' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " Mambo Component Articles Blind SQL Injection Exploit \n"; print " Author:Ded MustD!e www.antichat.ru \n"; print " \n"; print " Dork : inurl:option=articles artid \n"; print " Usage: perl exploit.pl ho...

offl-sql.txt

-+================================================================================+- -+ OFFL = 0.2.6 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 19 JUNE 2008 Script Download:...

OFFL <= 0.2.6 (teams.php fflteam) Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ OFFL = 0.2.6 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On:...

OFFL <= 0.2.6 (teams.php fflteam) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== OFFL = 0.2.6 teams.php fflteam Remote SQL Injection Vulnerability ==================================================================== Discovered By: t0pP8uZz Discovered...

PHP Site Lock 2.0 - index.php SQL Injection

PHP Site Lock 2.0 - index.php SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Site Lock 2.0 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHP Site Lock version : 2.0 Site : www.phpsitelock.com -:: SQL ::-...

PHP Site Lock 2.0 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== PHP Site Lock 2.0 index.php page Remote SQL Injection Vulnerability ===================================================================== Viva IslaM Viva IslaM Remote SQ...

Comparison Engine Power 1.0 - Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n"; print " Author: Mr.SQL \n"; print " EMAIL :...

Comparison Engine Power 1.0 - Blind SQL Injection

Comparison Engine Power 1.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n";...

phpeasynews-sql.txt

-+================================================================================+- -+ PHPEasyNews = 1.13 RC2 SQL Injection Vulnerabilitys +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On: 4 JUNE 2008 Script Download:...

nitrowebgal-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions : V1.3 - V1.4- V1.41 - V1.42 - V1.43 Site :...

mymarket-blindsql.txt

!/usr/bin/perl MyMarket 1.72 Blind SQL Injection Exploit Bug by: h0yt3r Demo: http://mymarket.sourceforge.net/demo/shopping/ http://www.site.de/mymarket/shopping/?id=bluah Ok when we give $id an unexpected value like this we get an SQL Error. Union selecting seems not possible... Exploit needs a...

Nitro Web Gallery 1.4.3 - section SQL Injection

Nitro Web Gallery 1.4.3 - section SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability NiTrO Web Gallery V1.3 - V1.4- V1.41 - 1.42 - V1.43 albums.php section AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : NiTrO Web Gallery Versions...

awbs-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 Site :...

AWBS <= 2.7.1 (news.php viewnews) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== AWBS MD5...

Advanced Webhost Billing System (AWBS) 2.7.1 - 'news.php' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability AWBS Versions 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 news.php viewnews AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : AWBS Versions : 2.3.3 - v2.5.0 - v2.6.3 - 2.7.0 - V2.7.1 Site :...