Mnews 1.1 - 'view.php' SQL Injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

Mnews 1.1 SQL injection

\n"; echo "Example:\n"; echo "php $argv0 http://www.website.com/mnews\n"; exit; $target = $argv1; ifsubstr$target, strlen$target-1!="/" $target .= "/"; $inject = $target . "view.php?id=-0'%20"; $token = uniqid; $tokenhex = hex$token; echo " Trying to get informations...\n"; $infos =...

Regnum Christi SQL Injection

Regnum Christi SQL injection Exploit Title: Regnum Christi SQL injection Vulnerability Date: 01/06/2012 - 03:38 Author: KatiLhacker Software Website: http://www.regnumchristi.org Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"galeria.php?id=" $ Demo Sites:...

Sihebs Technologies SQL Injection

Exploit Title: Sihebs Technologies SQL Injection Vulnerability Date: 12/03/2012 Author: 3spi0n Software Website: www.sihebs.co.tz Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: changer $ Demo ; www.marineparks.go.tz/parksinfo.php?id=1' MySQLi Dar bi Koridor Benimki, Kendi...

Longtail E-Media Design SQL Injection

Exploit Title: Longtail E-media Design SQL Injection Vulnerability Date: 07/03/2012 Author: 3spi0n Software Website: http://www.longtail.info/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: inners.php $ Demo ; www.nast.org.np/inner.php?page=newsdetail&id=2' MySQLi Dar bi...

Web Net Marketing Design SQL Injection

Exploit Title: web net marketing Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.webnetmarketing.ltd.uk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: news-detail.php $ Demo ;...

BJMaster Design SQL Injection

Exploit Title: BJMaster Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.bjmaster.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: news.php $ Demo ; www.tigella.it/news.php?ID=29' MySQLi Dar bi Koridor Benimki, Kendimi...

Duru Design SQL Injection

Exploit Title: Duru Design SQL Injection Vulnerability Date: 03/03/2012 Author: 3spi0n Software Website: http://www.muratduru.com.tr/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: details.php $ Demo ; www.sariogluemlak.com.tr/details.php?masterid=SG-000155' MySQLi Dar bi...

vBSkinWorks SQL Injection

Exploit Title: vBSkinWorks "VCPanel" Sql Injection Vulnerability member.php Date: 17/02/2012 - 19:18 Author: 3spi0n Software Website: http://www.forumflux.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: members.php $ Demo ; ibh.vcp.ir/forum/members.php?member=1' MySQL...

AUTON Otomotiv Sanayi SQL Injection

AUTON Otomotiv Sanayi SQL injection Exploit Title: AUTON Otomotiv Sanayi SQL injection Vulnerability Date: 08/02/2012 - 10:34 Author: KatiLhacker Software Website: http://www.sonax.com.tr Tested On: BackTrack 5 - Win7 Ultimate Platform: PHP $ Dorks: "inurl:"haber.php?ID=" $ Demo Sites:...

InsideChannel Web Design SQL Injection

Exploit Title: InsýdeChannel Web Design SQL Injection Vulnerability Date: 04/02/2012 - 14.56 Author: 3spi0n Software Website: www.insidechannel.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: noticias.php $ Demo Sites: www.bookingcerdanya.com/fr/noticias.php?id=6" SQL...

ObjectLabs Forum Systems SQL Injection

Exploit Title: ObjectLabs Forum Systems SQL Injection Vulnerability Date: 04/02/2012 - 19.15 Author: 3spi0n Software Website: http://www.objectlabs.no/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: forums.php $ Demo Sites: www.carsplusplus.com/discussions/forums.php?id=1...

TOYUDesign SQL Injection

Exploit Title: TOYUDesign SQL Injection Vulnerability Date: 03/02/2012 - 02.49 Author: 3spi0n Software Website: www.toyudesign.com Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Demo Sites: www.nusamandiriinstruments.com/products.php?id=38" SQL Injection Dar bi...

Interactive Web Design SQL Injection

Exploit Title: Interative Web Design SQL Injection Vulnerability Date: 27/01/2012 - 04.13 Author: 3spi0n Software Website: www.interativeweb.com.br Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: ler.php $ Demo Sites: www.jornaldacidade.net/thaisbezerra/ler.php?id=84450" S...

Ultimate Locator SQL Injection

Exploit Title: Ultimate Locator SQL Injection Vulnerability Author: Robert Cooper Robert.Cooper at areyousecure.net Software Link: http://www.ultimatelocator.com/ Dork: "Powered by Ultimate Locator" Tested on: Linux/Windows 7 Vulnerable File: resultslist.php Vulnerable parameter: radius= PoC:...

Joomla Rule Local File Inclusion

Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

Ultimate Locator - radius SQL Injection

Ultimate Locator - radius SQL Injection source: https://www.securityfocus.com/bid/51653/info Ultimate Locator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Ultimate Locator - 'radius' SQL Injection

source: https://www.securityfocus.com/bid/51653/info Ultimate Locator is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Joomla Boss Local File Inclusion

Joomla Component comboss LFI Vulnerability 0day Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comboss" x exploits: 0day no more...

Joomla KP Local File Inclusion

Joomla Component comkp LFI Vulnerability Author : thecybernuxbie Home : www.thecybernuxbie.com E-mail : [email protected] Found : 20 January 2012 - 07:45 PM. Tested On : Windows 7 Ultimate. Google Dork : inurl:"/index.php?option=comkp" x exploits:...