Maian Weblog 4.0 Blind SQL Injection

?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. // Check month and year vars... // If...

SquareCMS 0.3.1 (post.php) SQL Injection Vulnerability

Exploit for php platform in category web applications SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source o...

SquareCMS 0.3.1 - post.php SQL Injection

SquareCMS 0.3.1 - post.php SQL Injection SquareCMS 0.3.1 post.php Remote SQL Injection Vulnerability found by cOndemned vendor: http://spoolio.co.cc/ download: http://webscripts.softpedia.com/script/Content-Management/Square-CMS-66303.html prior versions may also be affected source of post.php...

IPN Development Handler 2.0 - Multiple Vulnerabilities

IPN Development Handler 2.0 - Multiple Vulnerabilities IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script :...

LUCille Script 2.3 SQL Injection

Title: LUCille Script aboutbook.php SQL Injection Vulnerability Version: 2.3 Author: Mr.P3rfekT Software Link:N/A Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz. Exploit : http://127.0.0.1/path/category.php?id= == SQLi We See This : "sqldb was unable to successfully run a MySQL query...

Evernew Free Joke Script (viewjokes.php) SQL Injection

Exploit for unknown platform in category web applications ====================================================== Evernew Free Joke Script viewjokes.php SQL Injection ====================================================== / Name : Evernew Free Joke Script viewjokes.php SQL Injection WebSite :...

webCocoon's simpleCMS SQL Injection

webCocoon's simpleCMS Vulnerability Plugin Home: http://webcocoon.wordpress.com Author:ÝNFAZCI Site: www.1923turk.biz Exploit: Vuln file: /content/post/show.php Exploit: POST http://host/path/index.php HTTP/1.0 Content-type: application/x-www-form-urlencoded id=xek' union select...

427BB 2.3.2 - SQL Injection

427BB 2.3.2 - SQL Injection Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Download Script : http://sourceforge.net/projects/fourtwosevenbb/files/ 3rr0r: ./fourtwosevenbb-2.3.2/showpost.php PoC : http://server/path/showpost.php?ForumID=1&post=SQL...

OCS Inventory NG 1.2.1 - 'systemid' SQL Injection

OCS Inventory NG Server 1.2.1 Details: The Open Computer and Software OCS Inventory Next Generation NG provides relevant inventory information about system configurations and software on the network. Download : http://www.ocsinventory-ng.org/index.php?page=1-02-1 Found by : Guilherme Marinheiro...

OCS Inventory NG Server 1.2.1 SQL Injection

OCS Inventory NG Server 1.2.1 Details: The Open Computer and Software OCS Inventory Next Generation NG provides relevant inventory information about system configurations and software on the network. Download : http://www.ocsinventory-ng.org/index.php?page=1-02-1 Found by : Guilherme Marinheiro...

Evernew Free Joke Script 1.2 Remote Change Password Exploit

Exploit for unknown platform in category web applications =========================================================== Evernew Free Joke Script 1.2 Remote Change Password Exploit =========================================================== Remote Change Password = Bug detail bug in change.php file ...

Tiger Dms - Authentication Bypass

============================================================================== DDDDD OOOO SSSS DDDD ZZZZZZ TTTTTTTTT EEEEE A MM MM D D o O S D D Z T E A A M M M M D D o o SSSS D D Z T EEEEE AAAAA M M M D D o o S D D Z T E A A M M DDDD oooO SSSS DDDD ZZZZZZ T EEEEE A A M M...

Simply Classified 0.2 - category_id SQL Injection

Simply Classified 0.2 - categoryid SQL Injection ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

UBBCentral UBB.Threads 5.5.1 - 'message' SQL Injection

Discovered: 07-18-08 By: SecureState R&D Team sasquatch www.securestate.com Background: ----------- SQL injection has previously been discovered https://www.securityfocus.com/bid/14052/ New Details: ------------ UBBThreads is nice enough to encrypt/mask the regular users' passwords in the databas...

BibCiter 1.5 SQL Injection

BibCiter 1.4 Multiple SQL Injection Vulnerability Author: nuclear site: http://bibciter.sourceforge.net/ vuln: http://localhost/path/projects.php?idp=-721 UNION SELECT @@version%23 http://localhost/path/contacts.php?idc=-1 UNION SELECT @@version%23 http://localhost/path/users.php?idu=-1 UNION...

BibCiter 1.4 Multiple SQL Injection Vulnerabilities

No description provided by source. BibCiter 1.4 Multiple SQL Injection Vulnerability Author: nuclear site: http://bibciter.sourceforge.net/ vuln: http://localhost/path/projects.php?idp=-721 UNION SELECT @@version%23 http://localhost/path/contacts.php?idc=-1 UNION SELECT @@version%23...

Syzygy CMS <= 0.3 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Syzygy CMS = 0.3 Auth Bypass SQL Injection Vulnerability ===========================================================...

Dark Age CMS 0.2c Beta - Authentication Bypass

Dark Age CMS 0.2c Beta - Authentication Bypass --+++==================================================================================+++-- --+++====== Dark Age CMS = v0.2c Beta Auth Bypass SQL Injection Vulnerability ======+++--...

Calendar Script 1.1 - Authentication Bypass

----------------------------------------------------- Calendar Script v1.1 Admin Login Bypass Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 File Vuln "index.php" code details...

Simple Document Management System 1.1.4 SQL Injection Auth Bypass

No description provided by source. SDMS Simple Document Management System v1.1.4 SQL Injection Author: Yuri Program: SDMS Simple Document Management System Version: v1.1.4 and probably all older versions as well Website: http://sdms.cafuego.net/ How it works The login system is very insecure, thi...