89 matches found
dForum 1.5 - 'DFORUM_PATH' Multiple Remote File Inclusions
dForum ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on dForum about.php admin.php anmelden.php closethread.php config.php delpost.php delthread.php dfcode.php download.php editanoc.php forum.php login.php makethread.php menu.php newthread.php openthread.php...
CoreNews 2.0.1 - userid SQL Injection
CoreNews 2.0.1 - userid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=24 Usage: corenews.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl host path use IO::Socket; if@ARGV != 2 usage; else exploit; sub...
ASPSitem <= 1.83 Remote SQL Injection Vulnerability
--Security Report-- Advisory: ASPSitem = 1.83 Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 19/04/06 19:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: ASPSitem http://www.aspsitem.com...
ASPSitem 1.83 - 'Haberler.asp' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl use IO::Socket; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Security Advisory...
ASPSitem 1.83 - Haberler.asp SQL Injection
ASPSitem 1.83 - Haberler.asp SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl use IO::Socket; if@ARGV != 3 usage; else exploit; sub header...
ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl host path userid use IO::Socket; if@ARGV != 3 usage; else exploit; s...
ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ASPSitem ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl use IO::Socket; if@ARGV != 3 usage; else...
[Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.
--Security Report-- Advisory: EzASPSite = 2.0 RC3 Remote SQL Injection Exploit Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 29/03/06 21:33 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: EzASPSite...
EzASPSite <= 2.0 RC3 (Scheme) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== EzASPSite ICQ: 10072 MSN/Main: email protected web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=22 Usage: ezasp.pl googledork: "Powered By EzASPSite v2.0 RC3"...
[SA19286] ASPPortal "downloadid" SQL Injection Vulnerability
TITLE: ASPPortal "downloadid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19286 VERIFY ADVISORY: http://secunia.com/advisories/19286/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASP Portal 3.x http://secunia.com/product/8725/ DESCRIPTION: nukedx...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ASPPortal use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-21\r\n"; print "- ASPPortal \r\n"; print "- -...
ASPPortal 3.1.1 - 'downloadid' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl use IO::Socket; use Math::BigInt; if@ARGV != 3 usage; else exploit; sub header print "\n- NukedX Securit...
JiRos Banner Experience 1.0 - Unauthorized Create Admin
JiRos Banner Experience 1.0 - Unauthorized Create Admin Jiros Banner Experience Pro Unauthorized Admin Add Exploit .xpl font-family:tahoma; font-size:11px; text-decoration: none; function jbxpl if document.xplt.victim.value=="" alert"Please enter site!"; return false; if confirm"Are you sure?"...
JiRos Banner Experience 1.0 (Create Admin Bypass) Remote Exploit
Exploit for unknown platform in category web applications ================================================================ JiRos Banner Experience 1.0 Create Admin Bypass Remote Exploit ================================================================ Jiros Banner Experience Pro Unauthorized Admin...
CilemNews System 1.1 - yazdir.asp haber_id SQL Injection
CilemNews System 1.1 - yazdir.asp haberid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140...
CilemNews System 1.1 - 'yazdir.asp' haber_id SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: cilem.pl Original Advisory: http://www.nukedx.com/?viewdoc=10 googledork inurl:yazdir.asp?haberid= 2.140 pages... use IO::Socket; if@ARGV + + Example: cilem.pl sux.c...
TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit
No description provided by source. Original advisory: http://www.nukedx.com/?viewdoc=18 Advisory by: nukedx Full PoC Explotation: GET - http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...
Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl victim directory modpage dbnum userid Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV 5 print ...
Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV + + Example: wbb.pl sux.com / infodb.php 1 1 + + Method found & Exploit scripted ...