1507 matches found
Comparison Engine Power 1.0 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print \n; print VIVA ISLAME VIVA ISLAME \n; print VIVA ISLAME VIVA ISLAME \n; print \n; print Comparison Engine Power 1.0 Blind SQL Injection Exploit \n; print \n; print Author: Mr.SQL \n; print EMAI...
ezDatabase <= 2.0 (db_id) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ezDatabase Remote Command Execution Exploit based on advisory by Pridels Team Copyright c 2006 cijfer cijfer@netti!fi All rights reserved. never ctrl+c again. cijfer$ http://target.com/dir host changed to 'http://target.com/dir' cijfer$ $Id:...
WebCortex WebStores2000 SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7766/info This vulnerability is reportedly caused by a lack of sufficient sanitization of user-supplied data contained in URI parameters supplied to WebStores2000. Successful exploitation may allow for modification of the...
Work System ECommerce 3.0.3/3.0.4 Forum.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...
FlexBB <= 0.6.3 Cookies Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'FlexBB =...
KnowledgeQuest 2.6 - Administration Multiple Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29012/info KnowledgeQuest is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in other attacks. KnowledgeQuest 2.6 is vulnerable;...
jakcms 2.0 pro rc5 - Stored XSS via useragent http header injection
No description provided by source. Exploit Title: JAKCMS 2.0 PRO RC5 stored XSS via useragent HTTP header Injection Date: 7-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: JAKCMS PRO 2.0 RC5 and probably earlier version Teste...
Oatmeal Studios Mail File 1.10 Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1807/info OatMeal studios' Mail-File is a cgi application that allows for sending of certain files to user-specified email addresses via a web interface. A vulnerability exists in this script that can be used to send the...
RunCMS Newbb_plus <= 0.92 Client IP Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '420x383' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'Newbbplus =...
LinPHA Photo Gallery 2.0 - Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS...
DeluxeBB <= 1.2 - Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------- DeluxeBB = 1.2 Remote Blind SQL Injection Exploit -------------------------------------------------- by athos - stakerathotmaildotit download on http://deluxebb.com...
Scientific Image DataBase <= 0.41 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl use strict; use warnings; use LWP::UserAgent; Download: http://sidb.sourceforge.net/ Dork: Scientific Image DataBase This exploit retrives the admin username/password via blind mysql injection. print INFO; heredocs is ugly.. so is my INFO ;...
Webgate WebEye Information Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9169/info It has been reported that WebEye is prone to an information disclosure vulnerability that may allow an attacker to harvest sensitive information from the server such as usernames and passwords. The problem exist...
ADN Forum <= 1.0b Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -------------------------------------------------- ADN Forum = 1.0b Blind SQL Injection Exploit Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 01/10/2008 Download: http://sourceforge.net/projects/adnforum/...
Pheap CMS <= 1.1 (lpref) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS = 1 lpref Remote File Include Exploit + + + - Script name: Pheap CMS v. 1 - Script site: http://pheap.barekoncept.com/ + + + - Find by: Kacper a.k.a Rahim + -...
TutorialCMS <= 1.00 (search.php search) SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w TutorialCMS = 1.00 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code search.php: $search = $REQUEST'search'; $sql = SELECT FROM tutorials WHERE title LIKE...
Joomla Component TPDugg 1.1 - Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl //////////////////////////////////\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\////////////////////////////////// o TPDugg Joomla Component 1.1 Blind SQL Injection Exploit Software : comtpdugg version 1.1 Vendor :...
AJ Matrix DNA SQL Injection
No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: AJ Matrix DNA | -Site: http://www.ajsquare.com/ajhome.php | -Bug: Sql Injection | -Found: by Br0ly | -BRAZIL D |...
Pligg <= 9.9.0 - Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl -w use LWP::UserAgent; use MIME::Base64; use Digest::MD5 qwmd5hex; use Getopt::Std; getopts'h:', %args; print \n; print Pligg = 9.9 Remote Code Execution Exploit \n; print \n; dork = Powered By Pligg + Legal: License and Source Proxy address...
Joomla Tags (index.php, tag parameter) SQL Injection
No description provided by source. Exploit Title: Joomla tag Remote Sql Exploit dork: inurl:index.php?option=comtag Date: 18-10-2012 Author: Daniel Barragan D4NB4R Twitter: @D4NB4R Vendor: http://www.joomlatags.org Version: all License: Non-Commercial Download:...