XOOPS Module GesGaleri - SQL Injection

!/usr/bin/perl -w Xoops GesGaleri Sql injection Author : EcHoLL www.warezturk.org www.tahribat.com Greetz : Blacklabel TURK Godlike ! ModuleName: GesGaleri ! ScriptName: XOOPS ! GoogleDork: inurl:"/modules/GesGaleri/" system"color FF0000"; system"Nohacking"; print...

SweetCMS 1.5.2 - index.php SQL Injection

SweetCMS 1.5.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/31774/info SweetCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. A successful exploit may allow an attacker to compromise the application, access or modif...

Motorola Timbuktu information leak

User data is sent to central server...

Stash 1.0.3 (SQL) User Credentials Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================== Stash 1.0.3 SQL User Credentials Disclosure Exploit ===================================================== !/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl This...

Stash 1.0.3 - SQL Injection User Credentials Disclosure

!/usr/bin/perl -w User credentials disclosure exploit - stash103exp.pl Gnix http://gnix.netsons.org This exploit use an SQL Injection in the file admin/login.php to bypass the login, and then an SQL Injection in the admin/news.php to extract all the users info. Note: password are crypted with md5...

SA-2008-061 - Everyblog - Multiple vulnerabilities

The module does not follow Drupal best practices for database queries and handling of user submitted data, leading to a number of vulnerabilities. Of special concern is that an unprivileged user may become logged in to the account of an existing user, including an administrator. Versions Affected...

AmpJuke 0.7.5 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/31592/info AmpJuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

bookmarksfav-sql.txt

|| | | BookMarks Favourites Script viewgroup.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : IQ-SecuritY WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script :...

Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability

No description provided by source. Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

euploader-sql.txt

E-Uploader Pro = 1.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: E-Uploader Pro Version: 1.0 Price: $49 URL: www.scriptsfrenzy.com Download script: http://rapidshare.com/files/18285945/E-UploaderPro.PHP.NULL-DGTlicense.zip Vulnerability Class: SQL Injection Conditio...

Pro Chat Rooms 3.0.3 - SQL Injection

Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Joovili 3.0 - Multiple SQL Injections

Joovili 3.0 - Multiple SQL Injections Joovili = 3.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 27.08.08 Product: Joovili Version: 3.0 Price: $155 URL: www.joovili.com Download script: http://rapidshare.com/files/96178834/Joovili.Patch.3.0.12.Themes.WST.rar.html Vulnerability Class:...

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection

Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection Vbgooglemap Hotspot Edition 1.0.3 Remote SQL Injection Vulnerability Bug discovered by elusiven It was priv8 Bug: Target/Path/vbgooglemaphse.php?do=showdetails&mapid=-1+UNION+SELECT+0,1,password,salt,username,5,6,7,8,9,10,11,12,13+FROM+user-- or:...

oceandir-sql.txt

/ @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit : user...

Oceandir <= 2.9 (show_vote.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Oceandir Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 /...

MyFWB 1.0 (index.php page) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= MyFWB 1.0 index.php page Remote SQL Injection Vulnerability ============================================================= MyFWB 1.0 Remote SQL Injection Author: 0x90 Product:...

Kasseler CMS 1.1.01.2.0 Lite - SQL Injection

Kasseler CMS 1.1.01.2.0 Lite - SQL Injection Kasseler CMS 1.1.0, 1.2.0 Lite SQL Injection Author: !DoktOR! Date found: 13.09.08 Product: Kasseler CMS Version: 1.1.0, 1.2.4 URL: www.kasseler-cms.net Vulnerability Class: SQL Injection...

paidversion-sql.txt

|| | | paidversion tr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.Hussin-X.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.downlinegoldmine.com/ ...

Paranews 3.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/31152/info Paranews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

Discuz! 6.0.1 (searchid) Remote SQL Injection Exploit-vulnerability warning-the black bar safety net

The following proceduresmethodsmay carry offensive,for security research and teaching purposes,at your own risk!& lt;? php errorreportingEALL&ENOTICE; printr" +------------------------------------------------------------------+ Exploit discuz6. 0. 1 Just work as php=5 & mysql=4.1 BY james...