AdaptBB 1.0 - 'topic_id' SQL Injection / Credentials Disclosure

!/usr/bin/perl -w AdaptBB 1.0 topicid SQL Injection / Credentials Disclosure Exploit Description ----------- AdaptBB contains a flaw that allows an attacker to carry out an SQL injection attack. The issue is due to the inc/bb/topic.php script not properly sanitizing user-supplied input to the...

PHPRecipeBook 2.24 - base_id SQL Injection

PHPRecipeBook 2.24 - baseid SQL Injection + PHPRecipeBook 2.24 idRemort SQL Injection Vulnerability - + Discovered By d3b4g + script: http://phprecipebook.sourceforge.net/demo/phprecipebook/ + Greetz : str0ke | Inerd | & friends - Follow me on twitter www.twitter.com/schaba About: ------...

PowerNews 2.5.4 SQL Injection

...:::::powernews 2.5.4 SQL Injection Vulnerability::::.... Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz greetz:to my best friend in the world...

FLDS 1.2a report.php (linkida) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== FLDS 1.2a report.php linkida Remote SQL Injection Exploit =========================================================== !/usr/bin/perl -w Free Links Directory Script V1.2a Remote SQ...

Xpoze Pro (home menù) <= Blind $ql Injection

No description provided by source. ■ Xpoze Pro home menù = Blind $ql Injection --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection SIte vuln: http://www.xpoze.org/ --------------------------------------- ■ ExPL0iT:...

Joomla! Component Thyme 1.0 - SQL Injection

Joomla! Component Thyme 1.0 - SQL Injection Author: Ded MustD!e Google Dork: comthyme Exploit:...

TR News <= 2.1 (login.php) Remote Login Bypass Exploit

No description provided by source. ?php errorreporting0; / ------------------------------------------------------ TR News = 2.1 login.php Remote Login ByPass Exploit ------------------------------------------------------ By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/trscript-21.zi...

preshoppingmail-sql.txt

PRE SHOPPING MALLidRemote SQL Injection Vulnerability -------------------------------------------------------------------------------- ---------------------------------------------------------------- script : PRE SHOPPING MALL script : http://www.preprojects.com/pclphp.asp Risk : High...

sfsez-sql.txt

-=====================================- Application : SFS EZ Software Risk : High FOund By: x0r -=====================================- Exploit: software/software-description.php?id=-5 union all select 1,2,version,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/ Live Demo:...

ParsBlogger - links.asp SQL Injection

ParsBlogger - links.asp SQL Injection || | | ParsBlogger links.asp id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script :...

Gforge 4.6 rc1 - 'skill_edit' SQL Injection

Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...

Hotscripts Clone (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================= Hotscripts Clone cid Remote SQL Injection Vulnerability ========================================================= || | | Hotscripts Clone cid Remote SQL Injection Vulnerability | |...

Arctic Issue Tracker 2.0.0 - 'filter' SQL Injection (2)

!/usr/bin/perl use IO::Socket; print q ----------------------------------------------- Arctic Issue Tracker v2.0.0 exploit by ldma SubCode use: arctic.pl server dir sample: $perl arctic.pl localhost /arctic/ ----------------------------------------------- ; $webpage = $ARGV0; $directory = $ARGV1;...

PHPFootball 1.6 - SQL Injection

PHPFootball 1.6 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability PHPFootball 1.6 show.php dbtable AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

WebChamado 1.1 (tsk_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== WebChamado 1.1 tskid Remote SQL Injection Vulnerability ========================================================== ...:::::WebChamado 1.1 SQL Injection Vulnerability ::::.... speci...

Gravity Board X 2.0 Beta - SQL Injection / Cross-Site Scripting

==================================================================== Gravity Board X 2.0 Beta SQL/XSS Multiple Remote Vulnerabilities ==================================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking...

Yuhhu 2008 SuperStar (board) Remote SQL Injection Exploit

No description provided by source. ?php / Coded By RMx Yuhhu 2008 SuperStar Sql injection exploit... BiyoSecurity.Com & Coderx.org Thanx : Liz0zim & Cr@zyKing / settimelimit0; errorreportingEALL; function yolla$site,$liz0zim global $veri;$exploit = fsockopengethostbyname$site,"80";...

PHPEasyData 1.5.4 - 'annuaire.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29659/info PHPEasyData is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage the cross-site scripting issues to execute arbitrary script code in the...

comicshout28-sql.txt

--==+=================== Spanish Hackers Team www.spanish-hackers.com =================+==-- --==+ ComicShout 2.8 news.php newsid Remote SQL Injection Vulnerability +==-- --==+====================================================================================+==-- - dreaming of necessity is reas...

StanWeb.CMS (default.asp id) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= StanWeb.CMS default.asp id Remote SQL Injection Exploit ========================================================= --==+=================== Spanish Hackers Team www.spanish-hackers.c...