PT-2011-2346 · Tinybb · Tinybb

Name of the Vulnerable Software and Affected Versions: tinyBB version 1.2 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This can be achieved via the id parameter in a profile action to "index.php". Recommendations: For tinyBB...

DGNews 2.1 - SQL Injection

DGNews 2.1 - SQL Injection Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1'...

OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities

Exploit for php platform in category web applications ============================================================== OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities ============================================================== :::::::::::::::::::::::::::::::::::::: 0x1...

DBSite Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================= DBSite Remote SQL Injection Vulnerability ========================================= !/usr/bin/env python -- coding: utf-8 -- -------------------------------------------------------- Exploit Title: DBSi...

OneOrZero AIMS 2.6.0 Members Edition Local File Inclusion / SQL Injection

Exploit Title: OneOrZero AIMS v2.6.0 Members Edition Multiple Vulnerabilities Date: 13.11.2010 Author: Valentin Category: webapps/0day Version: 2.6.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Titl...

xWeblog 2.2 - oku.asp?makale_id SQL Injection

xWeblog 2.2 - oku.asp?makaleid SQL Injection =================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2...

MyPhpAuction 2010 (id) Remote SQL Injection

Exploit for php platform in category web applications =========================================== MyPhpAuction 2010 id Remote SQL Injection =========================================== == Title: MyPhpAuction 2010 id Remote SQL Injection Vuln Version: 2010 Link:...

plano mostracategoria (id) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================================= plano mostracategoria id Remote SQL Injection Vulnerability ============================================================= Author: kalashnikov Software Link: download link if availab...

Monoloco CMS (page.php) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Monoloco CMS page.php Remote SQL Injection Vulnerability ========================================================== Author : KnocKout Thanks : DaiMon,Barcod3 Contact : email protected...

PHP Live 3.3 Remote SQL Injection Exploit

Exploit for php platform in category web applications ========================================= PHP Live 3.3 Remote SQL Injection Exploit ========================================= !/usr/bin/perl -w Exploit Title: PHP Live 3.3 Date: 01/08/2010 Author: TA4G - email protected Vendor:...

JTL Shop 2 Remote SQL Injection Exploit

Exploit for php platform in category web applications ======================================= JTL Shop 2 Remote SQL Injection Exploit ======================================= Exploit Title: JTL Shop 2 Date: 01/08/2010 Author: TA4G - email protected Location: Algeria Vendor: www.jtl-software.de...

Caner Hikaye Script - SQL Injection

=================================================== Caner Hikaye Scripti hikaye.asp?id= Remote Sql inj =================================================== Author : v0calist Homepage : http://v0calist.blogspot.com & www.worldhackerz.com Mail : v0calistathotmaildot.com Script :...

BS Scripts Directory - articlesdetails.php SQL Injection

BS Scripts Directory - articlesdetails.php SQL Injection Exploit Title: BS Script Directory articlesdetails remote SQL injection vulnerability Date: 16th july 2010 Author: k4k4shi Critical:high contact:lvyatlivedotde Price : 24.95 $ Software Link:http://www.brotherscripts.com/ Shoutz to :...

Group Office - 'comment_id' SQL Injection

Title Group Office Remote SQL Injection Vulnerability Author ADEO Security Published 17/07/2010 Version 3.5.9 Possible all versions Vendor http://www.group-office.com Download http://sourceforge.net/projects/group-office/files/3.5/groupoffice-com-3.5.9.tar.gz/download Description "Take your offic...

PHP-Nuke 8.0 - SQL Injection

PHP-Nuke 8.0 - SQL Injection !/usr/bin/perl 0-Day PHP-Nuke newPOST = $HostName.'modules.php?name=News'; my $Cookies = new HTTP::Cookies; my $UserAgent = new LWP::UserAgent agent = 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, defaultheaders = HTTP::Headers-new, or die $!; my $Referrer =...

Oxygen2PHP <= 1.1.3 (member.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ============================================================ Oxygen2PHP 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; my $Get = $UserAgent-get$HostName.SQLInjection$UserName; if$Get-content = /0-91,5 : a-zA-Z0-9-.2,15 :...

PHP Realty (dpage.php) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================= PHP Realty dpage.php Remote SQL Injection Vulnerability ========================================================= Author: HaiHui Published: 29.06.2010 Description: PHP Realty is a turnk...

CubeCart PHP (shipkey parameter) <= 4.3.x Remote SQL Injection

Exploit for php platform in category web applications ============================================================== CubeCart PHP shipkey parameter = 4.3.x Remote SQL Injection ============================================================== SQL Injection in CubeCart PHP Free & Commercial Shopping...

ArabPortal v2.2.x Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== ArabPortal v2.2.x Remote SQL Injection Vulnerability ==================================================== Software Link: http://www.arab-portal.info/download.php?action=download&fileid=127...

PHP-NUKE v5.0 viewslink Remote SQL Injection

No description provided by source. Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...