Libera CMS 1.12 - 'cookie' SQL Injection

!/usr/bin/perl ---------------------------------------------------------- Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request = $https-post$hostname."/admin.php?action=adduserprocess", username = $username, password =...

Microsoft Windows GDI+ BMP Parsing Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows XP, Server and Vista. User interaction is required in that a user must open a malicious image file. The specific flaws exist in the GDI+ subsystem when parsing maliciously crafted...

alstrasoftforum-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 - rsauron - baltazar - sinner01 - C1c4Tr1Z - beenu --- QKrun1x - skillfaker - FeDeReR - Optyx - Nuclear and all darkc0de...

elitecms-sql.txt

elite CMS v1.0 SQL Injection Vulnerability By : e.wiZz! Info: Bosnian Idiot FTW! Site : infected.blogger.ba , http://houseofhackers.org/profile/ewiZz In the wild..... Exploit: http://inthewild.xxx/index.php?page=sql Poc:...

iFdate 2.0.3 - SQL Injection

iFdate 2.0.3 - SQL Injection iFdate = 2.0.3 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: iFdate Version: 2.0.3 Price: $140 Download script: http://depositfiles.com/ru/files/537317 Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off...

Crafty Syntax Live Help <= 2.14.6 (department) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================= Crafty Syntax Live Help = 2.14.6 department SQL Injection Vuln ================================================================= Crafty Syntax Live Help = 2.14.6 SQL Injecti...

Crafty Syntax Live Help 2.14.6 - department SQL Injection

Crafty Syntax Live Help 2.14.6 - department SQL Injection Crafty Syntax Live Help = 2.14.6 SQL Injection August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured,...

Crafty Syntax Live Help 2.14.6 - 'department' SQL Injection

Crafty Syntax Live Help = 2.14.6 SQL Injection August 25, 2008 Vendor : Eric Gerdes URL : http://www.craftysyntax.com Version : Crafty Syntax Live Help = 2.14.6 Risk : SQL Injection Description: Crafty Syntax Live Help is a full featured, open source, online support system written in php that...

atmail-disclose.txt

!/usr/bin/perl LEGAL: Permission is granted to freely reproduce this document in its entirety under the condition that the contents are not altered in any way. milw0rm IS permitted to add their standard footer: // milw0rm.com / date Permission to view or reproduce this file is NOT granted to any...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Galatolo Web Manager 1.3a - Cross-Site Scripting / SQL Injection

--==+============================================================================+==-- --==+ Galatolo Web Manager 1.3a alertdocument.cookie SQL plugin users 1.3a + plugins/users/index.php?id= Code SQL +...

joomlaversioning-sql.txt

Name : Joomla Component comversioning id Remote Sql Injection Vulnerability + Team : DarkMatter Crew + Crew website : WwW.SykoPainKilla.CoM + Author : SpK & His0k4 + Contact : fatal.1.tyathotmail.comdotcom + D0rk : inurl:index.php?option=comversioning + Expl0iT :...

XchangeBoard 1.70 (boardID) Remote SQL Injection Vulnerability

No description provided by source. xchangeboard 1.70 final and lower Bug by: haZl0oh Dork: "Powered by xchangeboard" info:you have to be an registered user to use it like this !!!! there should be a lot more vulns there ; credentials like passwords are saved as cookies .... :D PoC:...

XchangeBoard 1.70 (boardID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== XchangeBoard 1.70 boardID Remote SQL Injection Vulnerability ============================================================== xchangeboard 1.70 final and lower Bug by: haZl0oh...

PHP-Fusion Mod Classifieds - lid SQL Injection

PHP-Fusion Mod Classifieds - lid SQL Injection Php fusion "classifieds" SQL-injetion ++++++++++++++++++++++++++++ Author : boom3rang contact : boomerang at knaqu-shqipe dot de webpage : www.khg-crew.ws ++++++++++++++++++++++++++++ ---- Remote SQL Injection ------ + Dork:...

phpsitelock-sql.txt

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Site Lock 2.0 index.php page AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : PHP Site Lock version : 2.0 Site : www.phpsitelock.com -:: SQL ::- www.site.com/...

ducnoip-disclose.txt

/ DUC NO-IP Local Password Information Disclosure Authors: Charalambous Glafkos George Nicolaou Date: March 11, 2008 Site: http://www.astalavista.com Mail: [email protected] [email protected] Synopsis: DUC NO-IP is prone to an information disclosure vulnerability due to a design error...

Joomla! Component Bible Study 1.5.0 - 'id' SQL Injection

!/usr/bin/perl -w Joomla Component biblestudy Remote SQL Injection Founded & Exploited by : Stack & Jadi Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs : P0c 1:...

flashblog-sql.txt

Name : FlashBlog sql Inyeccion Author : Her0 Dork : "flashblog", allinurl:flashblog.html Greetz : Komtec1,Freak,Knet,Boer,ka0x Proof of Concept :...

scoutportal-sql.txt

!/usr/bin/perl Scout Portal Toolkit new or die; my $go=$cnx-get$victim."/SPT--BrowseResources.php?ParentId=337+and+1=2+union+all+select+0,1,2,3,4,concatUserName,char34,UserPassword,6,7,8+from+APUsers/"; if $go-content = m/APUsers/\' class=''.?/ms print "+ $1\n\n"; else print "\n- exploit...