CzarNews <= 1.20 (Account Hijacking) Remote SQL Injection Vuln

首先登陆一个CzarNews 1.20 版本的网站。 2. 打开登陆页面,然后在地址栏中输入 javascript:document.cookie="recook=' or ''=',' or ''='";void0; 随后刷新页面，接下来见证奇迹，你会惊奇的发现你处于了登陆状态。 3. 如果你输入以下代码在URL当中 javascript:c=document.cookie;p=c.substrc.lastIndexOf'='+1.split/%../;a lert"Login: " + p0 + "\nPass: " + p1;void0;...

ASP NEWS <= 3.0 - (news_detail.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : ASP NEWS = V3 newsdetail.asp Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.planetgraphic.de/ SQL--------------------------------------------------------- http://target/path//newsdetail.asp?id=SQL Example:...

PageSquid CMS (index.php page) 0.3 Beta - Remote SQL Injection Vulnerability

No description provided by source. ===================================================================== PageSquid CMS index.php page Remote SQL Injection Vulnerability ===================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Galatolo Web Manager <= 1.0 - Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Portal : Galatolo WebManager 1.0 exploit aported password crypted exploit tatjibe password mcrypté :d mgharba :d:d:d:d Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & Simo64 & iuoisn & All muslims...

webSPELL <= 4.01.01 (getsquad) Remote SQL Injection Exploit

No description provided by source. WebSPELL = 4.01.01 getsquad Remote SQL Injection Exploit by: Kiba EXPLOIT: http://PAGE/PATH/index.php?site=squads&getsquad=Where+1=0+Union+Select+1,1,username,1,password,1+from+PREFIXuser/ REPLACE: if the website is http://yourwebsite.de/webspell/index.php PAGE...

Kensei Board <= 2.0.0b Multiple SQL Injection Vulnerabilities

No description provided by source. Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == showforum...

Simple CMS FrameWork <= 1.0 (page) Remote SQL Injection Vuln

No description provided by source. ============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker...

PHP Classifieds <= 7.1 (detail.php) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Script Name: Php Classifieds = 7.1 detail.php Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : use IO::Socket; if@ARGV 3 print ======================================================================== // Php Classifieds = 7....

Mobius <= 1.4.4.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Mobius = 1.4.4.1 Remote SQL Injection Vulnerability Script: Mobius Web Publishing Software Script sit...

MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability

No description provided by source. ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / /...

TriO <= 2.1 (browse.php id) Remote SQL Injection Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl TriO = 2.1 Remote SQL Injection Vulnerability Script: TriO, iO's new web-based module, enables you to...

Okul Web Otomasyon Sistemi 4.0.1 - Remote SQL Injection Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: Okul Web Otomasyon Sistemi Script Download: http://www.aspindir.com/Goster/3822 Contact: ilker Kandemir...

TLM CMS 3.2 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. TLM CMS v3.2 - Multiple Remote SQL Injection Vulnerabilities Vendor : http://tlm.hebserv.fr/ Download : http://tlm.hebserv.fr/modfile/upload/tlmcms32.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Kutu pada...

Invision Power Board <= 2.3.5 - Remote SQL Injection Exploit

No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind waraxe // Estoni...

BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability

No description provided by source. BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser...

PHP-Nuke My_eGallery <= 2.7.9 - Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery gid Remote SQL Injection Dork: inurl:modules.php?name=MyeGallery...

IPTBB <= 0.5.4 (viewdir id) Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

zBlog 1.2 - Remote SQL Injection Vulnerability

No description provided by source. zBlog v1.2 Remote SQL Injection Exploit AUTHOR : H-T Team HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : zBlog Version : 1.2 Site : http://kaxz01.free.fr/ Download : http://kaxz01.free.fr/fichiers/zBlog.zip EXPLOITS : 1...

Mambo Component Ricette 1.0 - Remote SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomricette AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: comricette DORK 2 : allinurl: comricetteid EXPLOIT :...

MyTopix <= 1.3.0 (notes send) Remote SQL Injection Exploit

No description provided by source. ?php / MyTopix = 1.3.0 notes send Remote SQL Injection Exploit Bug discovered & exploited by cOndemned Desc : In order to exploit this vulnerability user have to be logged on the forum, so I'd decided to write this exploit x Greetz : Ex. fobidd3n t3am - Sw33t,...