AJchat 0.10 unset() bug Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== AJchat 0.10 unset bug Remote SQL Injection Vulnerability ========================================================== ---- AJchat Remote Sql Injection using unset bug ... ITDefence.r...

MTCMS <= 2.0 Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================= MTCMS = 2.0 Remote SQL Injection Vulnerabilities ================================================= ...:::::MTCMS =2.0 SQL Injection Vulnerbility ::::.... Virangar Security Team --------...

SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== SmallNuke 2.0.4 Pass Recovery Remote SQL Injection Exploit ========================================================== !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox;...

PHP Webquest 2.6 (id_actividad) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ PHP Webquest 2.6 idactividad Remote SQL Injection Exploit ============================================================ !/usr/bin/perl PHP Webquest 2.6 Remote SQL Injection Exploi...

evilboard-sqlxss.txt

Title: EvilBoard 0.1a Alpha Multiple Remote Vulnerabilities Author: seaofglass, Download: http://sourceforge.net/projects/evilboard Bug: XSS & Remote Sql Injection Info: EvilBoard is using PHP and mysql. MySite: http://seaofglass.backrush.com bug 1 : XSS PoC...

dcpportal-sql.txt

!/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass this control using %27 instead ...

Eggblog <= 3.1.0 Cookies Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Eggblog "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...

DCP-Portal &lt;= 6.11 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q ?php echo "DCP Portal = 6.11 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Note : Magic Quotes = 0 Script Download : http://www.dcp-portal.org/ Bug in index.php : ?php //index.php ... 60. $sql = "SELE...

samPHPweb (songinfo.php) Remote SQL Injection Vulnerability

No description provided by source. Title:samPHPweb songinfo.php Remote SQL Injection Script:samPHPweb Download:http://www.spacialaudio.com/download/samPHPweb.zip Bug:songinfo.php Author:BackDoor Dork1:inurl:samPHPweb/playing.php Dork2:This page was produced using SAM Broadcaster. Copyright Spacia...

DCP-Portal 6.11 - SQL Injection

DCP-Portal 6.11 - SQL Injection !/usr/bin/php -q But the script filter the quotes with this code, included in each page of the cms: 0 119. $str = $SERVER'QUERYSTRING'; 120. $arr = split';&', URLdecode$str; 121. $pos = strpos$str, "'"; 122. if $pos 123. $hackattempt = true; ... ? But we can bypass...

Tribisur &lt;= 2.0 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php -q ?php echo "Tribisur = 2.0 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Script Download : http://www.comscripts.com/scripts/php.tribisur-20.1211.html Bug 1 in modules/forum/liste.php : First, this...

Tribisur <= 2.0 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================ Tribisur And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2...

samPHPweb (songinfo.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== samPHPweb songinfo.php Remote SQL Injection Vulnerability =========================================================== Title:samPHPweb songinfo.php Remote SQL Injection...

MyPHP Forum &lt;= 3.0 (Final) Remote SQL Injection Vulnerability

No description provided by source. ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &...

ClipShare (uprofile.php UID) Remote SQL Injection Vulnerability

No description provided by source. video sharing www.clip-share.com Remote SQL Injection Exploit All Version AUTHOR :Krit webmaster of http://www.thaishadow.com HOME : http://www.thaishadow.com Download : http://www.clip-share.com/ DorKs :inurl:/uprofile.php?UID= or "Powered by clipshare" EXPLOIT...

MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= MyPHP Forum | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008...

webportalcms-sql.txt

!/usr/bin/perl -w WebPortal CMS If we select an inesistent id of a mod, it'll try to include it. So we have a warning error with the hash!. use LWP::UserAgent; if @ARGV new or die "-LWP::UserAgent error.\n"; $b-agent'Mozilla/4.0 compatible; MSIE 7.0; Windows NT 5.1'; print "+Exploiting.\n"; $host...

joomlapuarcade-sql.txt

Joomla Component PU Arcade Remote SQL Injection Exploit AUTHOR : HouSSamix of H-T TeaM We are HouSSamix ToXiC350 CoNaN HOME : http://no-hack.net Script : PU Arcade Joomla Component Tested in version 2.0.3 & 2.1.3 Beta Download : http://www.pragmaticutopia.com/ DorKs : PU Arcade by...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...

IPTBB 0.5.4 - &#039;id&#039; SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...