33 matches found
OpenText Documentum Administrator XML External Entity Injection Vulnerability
OpenText Documentum Administrator is Canada's OpenText company's Web-based set of development tools used to perform Documentum system management tasks. An XML external entity injection vulnerability exists in OpenText Documentum Administrator version 7.2.0180.0055. A remote attacker could use thi...
NewStatPress <= 1.0.4 - SQL Injection
The Search functionality is susceptible to a SQL Injection attack due to usage of user input without sanitation. In particular, at line 98 of 'includes/nspsearch.php'. Utilising a specially crafted SQL query, we can trigger disclosure of user hashes through an IMG tag as the data channel. PoC The...
GeniXCMS 0.0.1 SQL Injection
GeniXCMS v0.0.1 Remote Unauthenticated SQL Injection Exploit Vendor: MetalGenix Product web page: http://www.genixcms.org Affected version: 0.0.1 Summary: GenixCMS is a PHP Based Content Management System and Framework CMSF. It's a simple and lightweight of CMSF. Very suitable for Intermediate...
Drupal < 7.32 Pre Auth SQL Injection
No description provided by source. ?php // // / / / // / / // \ / / /// / / / / / / / / / // / / / , / // / // / / / / // / / / // ////||//// ///// /// // Poc for Drupal Pre Auth SQL Injection - c 2014 SektionEins // // created by Stefan Horst [email protected] // and Stefan Esser...
Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection
!/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code, course.title,course.dbname,CONCATuser.firstname,'...
Wordpress 2.1.2 (xmlrpc) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Wordpress 2.1.2 SQL Injection POC Credits: [email protected] Thanks to ferruh [email protected] improving my exploitation skills website:www.notsosecure.com Wordpress version 2.1.2 is vulnerable to sql injection. This POC works when...
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
Open any blog entry 2. Try to reply to any message 3. Push "Preview message" button Do not post your reply 4. Save source code of opened page to your PC 5. Find this string input type='hidden' name='eid' value='BLOGENTRYID' / 6. Change BLOGENTRYID with this SQL Injection: BLOGENTRYID UNION...
CuteNews <= 1.4.1 (function.php) Local File Include Exploit
No description provided by source. ?php // Happy NEW Iranian year . // Happy Norouz PERSIAN celebration // CuteNews 1.4.1 CutePHP.com Hash password Finder // by Hamid Ebadi // http://hamid.ir // Bug Discovered and Exploited by Hamid Ebadi .: Hamid Network Security Team :. // run it from your...
vuBB <= 0.2 (Cookie) Final Remote SQL Injection Exploit (mq=off)
Exploit for unknown platform in category web applications ================================================================ vuBB agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV1 $ARGV1 = '1'; my $path = $ARGV0 . '/index.php'; my $user = $ARGV1; userid to jack my $uname = $ARGV2; m...
MiniNuke 1.8.2 - hid SQL Injection
MiniNuke 1.8.2 - hid SQL Injection !/usr/bin/perl MiniNuke www.miniex.net Version: new Proto = "tcp", PeerAddr = $proxyAddr?"$proxyAddr":"$serv", PeerPort = $proxyPort?"$proxyPort":"80" || die "can't connect to: $serv\n"; print $socket "GET $request HTTP/1.1\n"; print $socket "Host: $serv\n"; pri...
phpWebSite <= 0.10.0 (module) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== phpWebSite Search&\160;\w32/elseprint "... One of those days :\n"; sub showh print " User: $name\n"; print " H...
XOOPS 2.0.11 - xmlrpc.php SQL Injection
XOOPS 2.0.11 - xmlrpc.php SQL Injection !/usr/bin/perl Xoops 0 print qq\b\b DONE --------------------------------------------------------------- USER NAME : $name USER HASH : $allchar --------------------------------------------------------------- ; else print "\b\b FAILED "; exit; else...